Skype Click to Call
SmartAdverts for Google Chrome™
begin
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
QuarantineFileF('c:\programdata\krb updater utility', '*.exe, *.dll, *.sys, *.bat, *.vbs, *.ps1, *.js*, *.tmp*', true, '', 0 ,0);
QuarantineFile('C:\Users\Darea\Desktop\проекты и прочее\Новая папка\Gооglе Сhrоmе.lnk', '');
QuarantineFile('C:\Users\Darea\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Gооglе Сhrоmе.lnk', '');
QuarantineFile('C:\Users\Public\Desktop\Google Chrome.lnk', '');
QuarantineFile('C:\ProgramData\KRB Updater Utility\krbupdater-utility.exe', '');
QuarantineFile('C:\Users\Darea\AppData\Local\Microsoft\2139FE1CA3DFE2D972722428F3E8D06D\DB05E6E50CF7E5E2299E140AECCACB41.exe', '');
ExecuteFile('schtasks.exe', '/delete /TN "KRB Updater Utility" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\CACB41CEA041E9922E5E7FC05EDB05E6" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\CACB41CEA041E9922E5E7FC05EDB05E6SB" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\Windows\CACB41CEA041E9922E5E7FC05EDB05E6" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\Windows\CACB41CEA041E9922E5E7FC05EDB05E6SB" /F', 0, 15000, true);
ExecuteFile('schtasks.exe', '/delete /TN "Microsoft\Windows\KRBUUS\KRB Updater Utility Service" /F', 0, 15000, true);
DeleteFile('C:\ProgramData\KRB Updater Utility\krbupdater-utility.exe', '32');
DeleteFile('C:\Users\Darea\AppData\Local\Microsoft\2139FE1CA3DFE2D972722428F3E8D06D\DB05E6E50CF7E5E2299E140AECCACB41.exe', '32');
DeleteFileMask('c:\programdata\krb updater utility', '*', true);
DeleteDirectory('c:\programdata\krb updater utility');
ExecuteSysClean;
ExecuteRepair(4);
ExecuteWizard('SCU', 2, 3, true);
CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
RebootWindows(true);
end.
перетащите на утилиту ClearLNK....\AutoLogger\CheckBrowserLnk
Start::
CreateRestorePoint:
GroupPolicy: Restriction <==== ATTENTION
GroupPolicy\User: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
BHO-x32: No Name -> {D5FEC983-01DB-414A-9456-AF95AC9ED7B5} -> No File
Toolbar: HKU\S-1-5-21-1501594051-2306709616-1805590079-1001 -> No Name - {91397D20-1446-11D4-8AF4-0040CA1127B6} - No File
Handler: WSIEChrome - {6D02ED5F-FD0D-4C4C - No File
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\nahd6ha2.default -> Поиск@Mail.Ru
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\nahd6ha2.default -> Поиск@Mail.Ru
FF Homepage: Mozilla\Firefox\Profiles\nahd6ha2.default -> C:\ProgramData\Zitenops\ff.HP
FF Keyword.URL: Mozilla\Firefox\Profiles\nahd6ha2.default -> hxxp://go.mail.ru/search?fr=ntg&q=
FF NewTab: Mozilla\Firefox\Profiles\nahd6ha2.default -> C:\ProgramData\Zitenops\ff.NT
FF Extension: (Домашняя страница Mail.Ru) - C:\Users\Darea\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\homepage@mail.ru [2015-12-07]
FF Extension: (Визуальные закладки @Mail.Ru) - C:\Users\Darea\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7} [2015-06-08] [not signed]
CHR Extension: (NewsRead) - C:\Users\Darea\AppData\Local\Google\Chrome\User Data\DFLTUSER\Extensions\ihmgiclibbndffejedjimfjmfoabpcke [2016-12-24]
OPR Extension: (NewsRead) - C:\Users\Darea\AppData\Roaming\Opera Software\Opera Stable\Extensions\ihmgiclibbndffejedjimfjmfoabpcke [2016-12-24]
Task: {57711B31-566B-4029-ACE6-73D2BF583442} - System32\Tasks\{C25DDFA8-F6C1-479A-8705-E66C08D1BA8B} => C:\Program Files (x86)\Common Files\AppDownloads\{C25DDFA8-F6C1-479A-8705-E66C08D1BA8B}.exe <==== ATTENTION
Task: {AD0EB1A0-D872-43E3-97B4-08D05B6CD527} - System32\Tasks\{4DED97E9-46A0-4155-BDC9-D343895A9BB2} => C:\Program Files (x86)\Common Files\AppDownloads\{4DED97E9-46A0-4155-BDC9-D343895A9BB2}.exe <==== ATTENTION
Task: {BE2FBE17-E427-4CF8-B716-6835533532CD} - System32\Tasks\{94F929C1-CB76-429F-B5D3-6FBEC3EFE2E1} => C:\Program Files (x86)\Common Files\AppDownloads\{94F929C1-CB76-429F-B5D3-6FBEC3EFE2E1}.exe <==== ATTENTION
Task: {D9745963-8FB7-44BE-B382-0BE0581E9A8B} - System32\Tasks\{459CDFFD-4A99-4922-B77A-643C3D79C907} => C:\Program Files (x86)\Common Files\AppDownloads\{459CDFFD-4A99-4922-B77A-643C3D79C907}.exe <==== ATTENTION
Task: {F6E6E18F-6045-409F-9AEA-97946AE7CFA0} - System32\Tasks\{336DC084-02AE-4A16-94FF-249D3DC070FD} => C:\Program Files (x86)\Common Files\AppDownloads\{336DC084-02AE-4A16-94FF-249D3DC070FD}.exe <==== ATTENTION
AlternateDataStreams: C:\Users\Darea\Cookies:cz4Aw05x9Hn4PDMj6nAFpiq [2202]
AlternateDataStreams: C:\Users\Darea\Cookies:dDFzKE0HQDS4KUKs0X [2146]
AlternateDataStreams: C:\Users\Darea\Cookies:LXyjGqYxtrwEXRT1ENoUvbLwVPbjG [2310]
AlternateDataStreams: C:\Users\Darea\AppData\Local\PQW7kLWIS:UnCGGNR3ejbIsa7ywl7IWFIXQ [583]
AlternateDataStreams: C:\Users\Darea\AppData\Local\rKEC1uXFqlPP16:HUIes26gnbM3Xc0KEHjgre3n [2202]
EmptyTemp:
Reboot:
End::
Через какой браузер заходите? Проверьте через Internet Explorer и сообщите.на мейл так и не могу зайти
Потому что он у Вас устаревшей версии.через хром нет
Панель управления - Удаление программ - найдите в перечне установленных и удалите.как удалить Skype Click to Call
По приведенным ссылкам разве не скачиваются?не понимаю как скачать обновления HotFix
We use cookies and similar technologies for the following purposes:
Do you accept cookies and these technologies?
We use cookies and similar technologies for the following purposes:
Do you accept cookies and these technologies?