Проверьте логи

[IDen]

Проверьте логи

Посмотрите логи.
Комп очень долго загружался!

Первоначально прогнал CureIt с помощью liveusb

Хочу продолжить лечение

[mod2]Уважаемый участник, напоминаю, что по нашим Правилам пользование хостингами ЗАПРЕЩЕНО. Файл перезалит.

Модератор[/mod2]

 

[Гризлик]

Скопируйте код ниже в буфер обмена

;uVS v3.87.4 [http://dsrt.dyndns.org]
;Target OS: NTv6.3
OFFSGNSAVE
delall %SystemDrive%\USERS\USER\APPDATA\LOCAL\HOSTINSTALLER\3736137244_123.EXE
delall %SystemDrive%\USERS\USER\APPDATA\LOCAL\APPS\2.0\ABRIL.EXE
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\ASPACKAGE\ASPACKAGE.EXE
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5YIPK2QF.DEFAULT\EXTENSIONS\{D720D64D-C71A-4316-B59E-8A41B860178F}\INSTALL.RDF
delref %SystemDrive%\PROGRAMDATA\LAMZAP\SINGZOZEX.DLL
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\MICROSOFT\VIDEO\UPDATER.EXE
delref %SystemDrive%\PROGRAMDATA\LAMZAP\ZERTOP.DLL
delref %SystemDrive%\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\DMPOJJILDDEFGNHIICJCMHBKJGBBCLOB\1.7.2_0\CHAMELEON
delref %SystemDrive%\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\LEENKJHMBCGEKOJLKIMCBODMNIOPGFNP\3.5\FAST SEARCH V3.5
delref HTTP://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?P=MKO_AWFZXIPYRAHDGKBFNYN5R-SRTQR4ZPSPGVZX87UB16L9WPFTZ0_HJQJHH5LK_UYLR_A1IUHXNZS-QYVXZGA5XQRCPVMBJDLG89E1O9WXUXQEB_IGBFVEOE9W1UVVKHDAEEZZI9GZWDZLDDW-QPN96REA-IHL57XZP-M5K89LX7URT8-0TW2JQ-ZOVCZCRMI,
delref HTTP://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?P=MKO_AWFZXIPYRAHDGKBFNYN5R-SRTQR4ZPSPGVZX87UB16L9WPFTZ0_HJQJHH5LK_UYLR_A1IUHXNZS-QYVXZGA5XQRCPVMBJDLG89E1O9WXUXQEB_6WGPP91YW_EOHNTAPKSWREK8OJXJDNOEBPCY6ZPSLWW5U_5LAUK4XVI7FNPHD5PPNBQPJWGV8EVXH
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DABLPCIKJMHAMJANPIBKCCDMPOEKJIGJA%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DDMPOJJILDDEFGNHIICJCMHBKJGBBCLOB%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DFDJDJKKJOIOMAFNIHNOBKINNFJNNLHDG%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DHPCGHCDJNEHPKDECAFLPEDHKLIMNEJIA%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DJKFBLCBJFOJMGAGIKHLDEPPGMGDPJKPL%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTP://WWW.I1236.NET/?TNI=9017210961_HAO
delref HTTPS://CHROME.GOOGLE.COM/WEBSTORE/DETAIL/DBHJDBFGEKJFCFKKFJJMLMOJHBLLHBHO
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DAHNPHCMHMHCJJCJHMNNJJLBMAELJECGA%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DCCFIFBOJENKENPKMNBNNDEADPFDIFFOF%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DEHFJIHAHBPHDPLJPIADBKMGMHNFEHHGI%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DFCFENMBOOJPJINHPGGGODEFCCIPIKBPD%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DILHAPDFJLMHFDGDBEFPINEBIJMHJIJPN%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DOELPKEPJLGMEHAJEHFEICFBJDIOBDKFJ%26INSTALLSOURCE%3DONDEMAND%26UC
delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DOJLCEBDKBPJDPILIGKDBBKDKFJMCHBFD%26INSTALLSOURCE%3DONDEMAND%26UC
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\5YIPK2QF.DEFAULT\EXTENSIONS\{6E727987-C8EA-44DA-8749-310C0FBE3C3E}\INSTALL.RDF
delall %SystemDrive%\USERS\USER\APPDATA\ROAMING\MOZILLA\EXTENSIONS\{EC8030F7-C20A-464F-9B0E-13A3A9E97384}\JID1-N5ARDBZHKUEDAA@JETPACK.XPI
delref %SystemDrive%\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FCFENMBOOJPJINHPGGGODEFCCIPIKBPD\0.0.0.8_0\MSN HOMEPAGE & BING SEARCH ENGINE
delall %SystemRoot%\RUN.VBS
delref %LOCALAPPDATA%\SWEETLABS APP PLATFORM\ENGINE\SERVICEHOSTAPP.EXE
delref %LOCALAPPDATA%\SWEETLABS APP PLATFORM\ENGINE\SERVICEHOSTAPPUPDATER.EXE
delref %SystemDrive%\USERS\USER\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\FLJNEJGGDKNCOILCBHMDFCDCCLLDCDOP\362.0.0.4_0\__MSG_APPNAME__
delall %SystemDrive%\PROGRAM FILES (X86)\TORRENT SEARCH\WQ2EQ6P.EXE
regt 12
regt 27
regt 28
regt 29
exec32 "C:\Program Files (x86)\sunnyday\unins000.exe"
exec32 rundll32.exe "C:\Program Files (x86)\Shuqogeclaale\VksevojientAdp.dll",Uninstall "/k={040A8485-6B14-4137-9357-16C9F7A73C81}"
exec32 "C:\Program Files (x86)\win_en_77\unins000.exe"
exec "C:\Users\user\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe" /UNINSTALLMENU
exec32 C:\Program Files (x86)\Obnovi Soft\uninstall.exe
deltmp
delnfr
restart

Закройте все браузеры. Запустите UVS под текущим пользователем. В меню: Скрипты---Выполнить из буфера обмена. На запрос программ об удалении согласитесь. После перезагрузки выполните сканирование Malwarebytes и выложите полученый лог