Author Topic: I have difficalties with disorderstatus.ru/order.php  (Read 1760 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
I have difficalties with disorderstatus.ru/order.php
« on: August 23, 2015, 09:09:56 AM »
Attached is the log file from FRST, Malwarebytes
« Last Edit: August 23, 2015, 09:33:07 AM by kyr »

Offline mikaelrask

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1556
Re: I have difficalties with disorderstatus.ru/order.php
« Reply #1 on: August 23, 2015, 09:32:23 AM »
hey and welcome to the forum kyr. please also attach the addtion log from when you run the frst tool.   
Windows 8.1 amd a10-5700 64 bit
12 GB ram 1 tb hard drive. Avast 18, MBAM

REDACTED

  • Guest
Re: I have difficalties with disorderstatus.ru/order.php
« Reply #2 on: August 23, 2015, 09:39:16 AM »
i have attached it

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: I have difficalties with disorderstatus.ru/order.php
« Reply #3 on: August 23, 2015, 12:19:20 PM »
Let me know if this stops it

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 
Quote
CreateRestorePoint:
HKLM-x32\...\Run: [] => [X]
URLSearchHook: [S-1-5-21-4147195901-2215540238-2443516817-1001] ATTENTION => Default URLSearchHook is missing
URLSearchHook: [S-1-5-21-4147195901-2215540238-2443516817-1003] ATTENTION => Default URLSearchHook is missing
2014-11-22 11:56 - 2014-11-22 11:56 - 82969472 ___SH () C:\ProgramData\msrhtpn.exe
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: Reg Delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F
Reg: Reg Add "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.
  • Close all open programs and internet browsers.
  • Double click on AdwCleaner.exe to run the tool.
  • Click on Scan.
  • After the scan is complete click on "Clean"
  • Confirm each time with Ok.
  • Your computer will be rebooted automatically. A text file will open after the restart.
  • Please post the content of that logfile with your next answer.
  • You can find the logfile at C:\AdwCleaner[S0].txt as well.