Jump to content

Съмнения за вирус

bojko452
 Share

Препоръчан пост

B-boy/StyLe/ Новобранец

B-boy/StyLe/

Публикувано
Публикувано

Следвайте следната инструкция за работа със SystemLook:

Изтеглете SystemLook и запазете програмата на десктопа.

  • Кликнете два пъти върху SystemLook.exe, за да стартирате програмата.
  • Копирайте съдържанието от цитата по-долу в текстовото поле на програмата:
    :filefind
yandex
Яндекс
:folderfind
yandex
Яндекс
:regfind
yandex
Яндекс


  • Кликнете на бутона Look, за да започне сканирането.
  • Когато сканирането завърши ще се отвори Notepad с резултата от сканирането. После публикувайте лог файла в следващия си коментар.

Link to comment
Сподели другаде
  • Отговори 57
  • Създадена
  • Последен отговор

ТОП потребители в тази тема

Популярни дни

ТОП потребители в тази тема

Популярни дни

Публикувани изображения

B-boy/StyLe/ Новобранец

B-boy/StyLe/

Публикувано
Публикувано

Следвайте следната инструкция за работа с ERUNT (програмата ще направи бекъп на регистрите):

  • Изтеглете програмата ERUNT
  • Инсталирайте и стартирате ERUNT.
  • Оставете настройките по подразбиране.
  • Натиснете "Ok" и потвърдете създаването на папка. Описание с картинки на ERUNT: тук.

  • Стартирайте файла http://billy-oneal.com/forums/Canned%20Speeches/speechimages/OTL/otlDesktopIcon.png с двукратен клик на мишката.
  • Под http://store.picbg.net/pubpic/0A/C1/c814d031472c0ac1.png с Copy/ Paste въведете изцяло следната текстова информация (само това, което е поставено в карето):

:files
C:\Program Files\Yandex
C:\Documents and Settings\Administrator\Local Settings\Application Data\Yandex
C:\Documents and Settings\Administrator\Local Settings\Application Data\Chromium\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex
C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex
C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Xpom\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex
:reg
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0DF1ABD2-D97D-4F99-948C-B2D9EECC2728}]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\Yandex]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{D487B252-BDED-4403-A5EC-7208BCEEF13C}]
[-HKEY_CURRENT_USER\Software\Yandex]
[-HKEY_CURRENT_USER\Software\Classes\CLSID\{2614C37E-2C78-4bfb-B7A6-E49B62B9CD9B}]
[-HKEY_CURRENT_USER\Software\Classes\TypeLib\{8A22B9B5-F9B6-461F-8828-3BC9AE89F351}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{91397D13-1446-11D4-8AF4-0040CA1127B6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0471A28A-A2DA-4CF5-AB5A-C5A919FB5F1A}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7BE8F568-D6B8-4002-A2F6-813974C8607B}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\Yandex]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\Yandex]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-329068152-1958367476-1801674531-500\Components\602D8C81456A6AD4187AF036F1ACBA90]
"6B856314B1D917A468825871ACE1E3F5"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-329068152-1958367476-1801674531-500\Components\808A14F8D29D2A54B9B2677FB62BFC36]
"6B856314B1D917A468825871ACE1E3F5"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Activities]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E05814C-9C21-46FE-8ADF-903A64A6D1F6}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2848EAA5-1F22-4382-8CD1-6DD602BFE345}]
[-HKEY_USERS\.DEFAULT\Software\Yandex]
[-HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0DF1ABD2-D97D-4F99-948C-B2D9EECC2728}]
[-HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500\Software\Microsoft\Internet Explorer\SearchScopes\Yandex]
[-HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500\Software\Yandex]
[-HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500\Software\Classes\CLSID\{2614C37E-2C78-4bfb-B7A6-E49B62B9CD9B}]
[-HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500\Software\Classes\CLSID\{D236C998-BECE-472D-B939-541727B72AEF}]
[-HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500\Software\Classes\TypeLib\{8A22B9B5-F9B6-461F-8828-3BC9AE89F351}]
[-HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500_Classes\CLSID\{2614C37E-2C78-4bfb-B7A6-E49B62B9CD9B}]
[-HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500_Classes\CLSID\{D236C998-BECE-472D-B939-541727B72AEF}]
[-HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500_Classes\TypeLib\{8A22B9B5-F9B6-461F-8828-3BC9AE89F351}]
[-HKEY_USERS\S-1-5-18\Software\Yandex]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{53C0373B-51E4-4F85-9085-53EF06DE6E00}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{9340F2B2-4F27-4575-8BAE-4AAD70B69B28}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FastDial.CFastDial]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FastDial.CFastDial.1]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\Yandex]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Activities]
:commands
[emptytemp]

След като въведете скрипта от цитата по-горе натиснете бутона, маркиран в червено: Run Fix

Windows ще се рестартира и ще се създаде лог файл - OTL fix log. Публикувайте съдържанието му с Copy/Paste в следващия си коментар.

Link to comment
Сподели другаде
zygi123 Новобранец

zygi123

Публикувано
Публикувано

All processes killed

========== FILES ==========

File\Folder C:\Program Files\Yandex not found.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Yandex\Updater\vb folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Yandex\Updater\barie folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Yandex\Updater folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Yandex\Praetorian folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Yandex\Internet\User Data\Default folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Yandex\Internet\User Data folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Yandex\Internet\Application folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Yandex\Internet folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Yandex folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Chromium\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\yaru folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Chromium\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\weather folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Chromium\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\statistics folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Chromium\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\region folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Chromium\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\passport folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Chromium\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\opinions folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Chromium\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\mail folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Chromium\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\identification folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Chromium\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\counters folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Chromium\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\yaru folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\weather folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\statistics folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\region folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\passport folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\opinions folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\mail folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\identification folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\counters folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Xpom\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\yaru folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Xpom\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\weather folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Xpom\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\statistics folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Xpom\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\region folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Xpom\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\passport folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Xpom\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\opinions folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Xpom\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\mail folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Xpom\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\identification folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Xpom\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex\counters folder moved successfully.

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Xpom\User Data\Default\Extensions\nkcpopggjcjkiicpenikeogioednjeac\1.2.118_0\core\js\yandex folder moved successfully.

========== REGISTRY ==========

Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0DF1ABD2-D97D-4F99-948C-B2D9EECC2728}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0DF1ABD2-D97D-4F99-948C-B2D9EECC2728}\ not found.

Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\Yandex\ deleted successfully.

Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{D487B252-BDED-4403-A5EC-7208BCEEF13C}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D487B252-BDED-4403-A5EC-7208BCEEF13C}\ not found.

Registry key HKEY_CURRENT_USER\Software\Yandex\ deleted successfully.

Registry key HKEY_CURRENT_USER\Software\Classes\CLSID\{2614C37E-2C78-4bfb-B7A6-E49B62B9CD9B}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2614C37E-2C78-4bfb-B7A6-E49B62B9CD9B}\ not found.

Registry key HKEY_CURRENT_USER\Software\Classes\TypeLib\{8A22B9B5-F9B6-461F-8828-3BC9AE89F351}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8A22B9B5-F9B6-461F-8828-3BC9AE89F351}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{91397D13-1446-11D4-8AF4-0040CA1127B6}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91397D13-1446-11D4-8AF4-0040CA1127B6}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{AFBDA429-7995-4CCA-9298-7C7D6B4A244C}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0471A28A-A2DA-4CF5-AB5A-C5A919FB5F1A}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0471A28A-A2DA-4CF5-AB5A-C5A919FB5F1A}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7BE8F568-D6B8-4002-A2F6-813974C8607B}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7BE8F568-D6B8-4002-A2F6-813974C8607B}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\Yandex\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\Yandex\ not found.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-329068152-1958367476-1801674531-500\Components\602D8C81456A6AD4187AF036F1ACBA90\\6B856314B1D917A468825871ACE1E3F5 deleted successfully.

Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-329068152-1958367476-1801674531-500\Components\808A14F8D29D2A54B9B2677FB62BFC36\\6B856314B1D917A468825871ACE1E3F5 deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1E05814C-9C21-46FE-8ADF-903A64A6D1F6}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1E05814C-9C21-46FE-8ADF-903A64A6D1F6}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2848EAA5-1F22-4382-8CD1-6DD602BFE345}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2848EAA5-1F22-4382-8CD1-6DD602BFE345}\ not found.

Registry key HKEY_USERS\.DEFAULT\Software\Yandex\ deleted successfully.

Registry key HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0DF1ABD2-D97D-4F99-948C-B2D9EECC2728}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0DF1ABD2-D97D-4F99-948C-B2D9EECC2728}\ not found.

Registry key HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500\Software\Microsoft\Internet Explorer\SearchScopes\Yandex\ not found.

Registry key HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500\Software\Yandex\ not found.

Registry key HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500\Software\Classes\CLSID\{2614C37E-2C78-4bfb-B7A6-E49B62B9CD9B}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2614C37E-2C78-4bfb-B7A6-E49B62B9CD9B}\ not found.

Registry key HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500\Software\Classes\CLSID\{D236C998-BECE-472D-B939-541727B72AEF}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D236C998-BECE-472D-B939-541727B72AEF}\ not found.

Registry key HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500\Software\Classes\TypeLib\{8A22B9B5-F9B6-461F-8828-3BC9AE89F351}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8A22B9B5-F9B6-461F-8828-3BC9AE89F351}\ not found.

Registry key HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500_Classes\CLSID\{2614C37E-2C78-4bfb-B7A6-E49B62B9CD9B}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2614C37E-2C78-4bfb-B7A6-E49B62B9CD9B}\ not found.

Registry key HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500_Classes\CLSID\{D236C998-BECE-472D-B939-541727B72AEF}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D236C998-BECE-472D-B939-541727B72AEF}\ not found.

Registry key HKEY_USERS\S-1-5-21-329068152-1958367476-1801674531-500_Classes\TypeLib\{8A22B9B5-F9B6-461F-8828-3BC9AE89F351}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8A22B9B5-F9B6-461F-8828-3BC9AE89F351}\ not found.

Registry key HKEY_USERS\S-1-5-18\Software\Yandex\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{53C0373B-51E4-4F85-9085-53EF06DE6E00}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{53C0373B-51E4-4F85-9085-53EF06DE6E00}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{9340F2B2-4F27-4575-8BAE-4AAD70B69B28}\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{9340F2B2-4F27-4575-8BAE-4AAD70B69B28}\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FastDial.CFastDial\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FastDial.CFastDial.1\ deleted successfully.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\Yandex\ not found.

Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\ not found.

========== COMMANDS ==========

 

[EMPTYTEMP]

 

User: Administrator

->Temp folder emptied: 167272 bytes

->Temporary Internet Files folder emptied: 34265 bytes

->Java cache emptied: 0 bytes

->FireFox cache emptied: 21248085 bytes

->Opera cache emptied: 0 bytes

->Flash cache emptied: 658 bytes

 

User: All Users

 

User: Default User

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

 

User: LocalService

->Temp folder emptied: 66016 bytes

->Temporary Internet Files folder emptied: 71385 bytes

 

User: NetworkService

->Temp folder emptied: 0 bytes

->Temporary Internet Files folder emptied: 0 bytes

 

%systemdrive% .tmp files removed: 0 bytes

%systemroot% .tmp files removed: 0 bytes

%systemroot%\System32 .tmp files removed: 0 bytes

%systemroot%\System32\dllcache .tmp files removed: 0 bytes

%systemroot%\System32\drivers .tmp files removed: 0 bytes

Windows Temp folder emptied: 16867 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes

%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes

RecycleBin emptied: 2539170977 bytes

 

Total Files Cleaned = 2 442,00 mb

 

 

OTL by OldTimer - Version 3.2.39.2 log created on 04072012_225533

 

Files\Folders moved on Reboot...

File move failed. C:\WINDOWS\temp\_avast4_\Webshlock.txt scheduled to be moved on reboot.

File move failed. C:\WINDOWS\temp\Perflib_Perfdata_558.dat scheduled to be moved on reboot.

 

Registry entries deleted on Reboot...

 

Оффф..заболяха ме очите,четох някъде че новите версии на Мозила така блокирвали сайтове,ще задам въпрос в Мозила подръжка да видя какво ще кажат.Извинявам се че те тормозя и съм благодарен че отделяш време да ми помогнеш,накрая ще ми писне и тези сайтове където ми ги блокирва ще ги отварям с друг браузър,ако се сетите нещо друго ще го опитаме утре

Link to comment
Сподели другаде
zygi123 Новобранец

zygi123

Публикувано
Публикувано
Добро утро!Тази сутрин отворих 10-на пъти сайта и за сега няма проблеми,отървах се от това животно явно.Много ти благодаря за помощта,да сте живи и здрави и добре че ви има.Поздрави и приятен ден :) :cap:
Link to comment
Сподели другаде
B-boy/StyLe/ Новобранец

B-boy/StyLe/

Публикувано
Публикувано

За миг се притесних.

Виж само дали Yandex се е нагнездил и тук...

http://i.imgur.com/0reHL.png

Ако има го махни и оттам.

 

 

 

Деинсталирай OTL:

 

Стартирай OTL още веднъж и натисни бутона CleanUp.

http://i47.tinypic.com/35hfp21.jpg

Ще последва рестарт на Windows.

 

Изтрий ръчно всички инструменти и логове, които не са се изтрили при гореспоменатите процедури.

Link to comment
Сподели другаде
  • 3 months later...
credit7 Новобранец

credit7

Публикувано
Публикувано
здравейте аз също мисля че имам вирус ... свалих няколко online сканера и откриха 3-4 вируса но докато натисна дори се рестартира компа и така продължава да работи 1-2 минути и се рества пак и пак едва се оправи сега ... свалих ОТЛ и копирах сичко каквото сте казали можете ли да ми помогнете ???
Link to comment
Сподели другаде
Night_Raven Изследовател

Night_Raven

Публикувано
Публикувано

Сканирай с Malwarebytes Anti-Malware. Ако тепърва инсталираш програмата, в края инсталацията ще има отметка за автоматична актуализация, не я премахвай. В противен случай обнови дефинициите й ръчно. Ако вече имаш програмата, провери дали имаш последната версия и ако нямаш, премахни твоята и инсталирай най-новата, като в края на инсталацията остави отметката за актуализация на дефинициите.

 

Инструкции за сканиране:

- стартирай програмата;

- избери Perform quick scan (Бързо сканиране) и кликни бутон Scan (Сканиране);

- след като приключи сканирането, ако не са открити заплахи, ще се отвори автоматично текстов файл (който можеш да затвориш) и програмата ще те уведоми, че не е открила нищо, след което можеш да кликнеш бутон OK и да я затвориш;

- ако са открити заплахи, кликни бутон OK и после Show Results (Покажи резултатите);

- кликни бутон Remove Selected (Премахни избраните);

Ако е нужен рестарт, се съгласи и рестартирай веднага. След рестарта стартирай отново програмата, иди на подпорозиорец Logs (Дневници), маркирай последния дневник, кликни бутон Open (Отвори) и му копирай съдържанието тук. Ако не е бил нужен рестарт, трябва да се появи текстов файл - копирай му съдържанието тук.

Link to comment
Сподели другаде
s.feradov Новобранец

s.feradov

Публикувано
Публикувано

Опера поначало е бавен,и то като костенурка!Мини на Firefox!Той най бърз!Или ако си на Win 7 мини на Internet Explorer 9!

 

Това е абсолютна глупост. На какво се оповава това заключение?

Link to comment
Сподели другаде
liver Новобранец

liver

Публикувано
Публикувано

Хора, купете си MBAM и Zemana в допълнение към Avast FREE и мисля, че няма да имате такива проблеми.

И без такива програми, пак няма проблеми. Всичко зависи от ЗКУ-то. А даването на пари за защитен софтуер, е глупост. Както и за оптимизиращи\дефрагментиращи програми и подбните им шитни.

Link to comment
Сподели другаде

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Гост
Отговори на тази тема

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   Не можете да качите директно снимка. Качете или добавете изображението от линк (URL)

Loading...
×
 Share
Иди на предишната тема
×
×
  • Създай ново...