ïîìîãèòå ðàñøèôðîâàòü ôàéëû

âî âñåõ ïàïêàõ ïîÿâèëñÿ òåêñòîâûé ôàéë ñ íàçâàíèåì "ÈÍÔÎÐÌÀÖÈß_Î_ÄÅØÈÔÐÎÂÊÅ_ÔÀÉËÎÂ" è òåêñòîì:
Âíèìàíèå! Âàøè ôàéëû çàøèôðîâàíû, åñëè õîòèòå âîññòàðîâèòü âñå ôàéëû ïèøèí íà ïî÷òó:[email protected]


íà ïî÷òó íàäî ñîîáùèòü ýòîò: {CCDDEFGGHHHIIJJKLLLLMMNOOPPPQQRRSSTU-20.05.2014 7:18:53222818} ID áåç åãî çíàíèÿ äåøèôðîâêà áóäåò íå âîçìîæíà,


Âíèìàíèå, ó âàñ åñòü 1 ìåñÿö ÷òî-áû ñîîáùèòü ñâîé ID ìíå íà ïî÷òó, ïî ïðîøåñòâèè ýòîãî ñðîêà


êëþ÷ îò âàøèõ ôàéëîâ áóäåò óäàëåí èç ìîåé áàçû.
[ATTACH]475658[/ATTACH]
[ATTACH]475659[/ATTACH]

Óâàæàåìûé(àÿ) [B]Àëåêñàíäð Îáðåçêîâ[/B], ñïàñèáî çà îáðàùåíèå íà íàø ôîðóì!

Ïîìîùü â ëå÷åíèè êîìüþòåðà íà VirusInfo.Info îêàçûâàåòñÿ àáñîëþòíî áåñïëàòíî. Õåëïåðû, â ñàìîå áëèæàéøåå âðåìÿ, îòâåòÿò íà Âàø çàïðîñ. Äëÿ îêàçàíèÿ ïîìîùè íåîáõîäèìî ïðåäîñòàâèòü ëîãè ñêàíèðîâàíèÿ óòèëèòàìè ÀÂÇ è HiJackThis, ïîäðîáíåå ìîæíî ïðî÷èòàòü â [URL="http://virusinfo.info/pravila.html"]ïðàâèëàõ îôîðìëåíèÿ çàïðîñà î ïîìîùè[/URL].

Åñëè íàø ñàéò îêàæåòñÿ ïîëåçåí Âàì è ó Âàñ áóäåò òàêàÿ âîçìîæíîñòü - ïîæàëóéñòà [URL="http://virusinfo.info/content.php?r=113-virusinfo.info-donate"]ïîääåðæèòå ïðîåêò[/URL].

Ïèñüìî ñîðàíèëîñü, âëîæåíèå èç êîòîðîãî çàïóñòèëè?

Ñäåëàéòå ëîã [url="http://virusinfo.info/showthread.php?t=53070&p=1104657&viewfull=1#post1104657"]ïîëíîãî ñêàíèðîâàíèÿ ÌÂÀÌ[/url]

ÿ íå çíàþ îòêóäà âçÿëñÿ âèðóñ, ïèñåì íå áûëî, íå ïîìíþ ÷òîáû ÷òî òî çàïóñêàë, ìîãó âûñëàòü äâà îäèíàêîâûõ ôàéëà, çàøèôðîâàííûé è íåò

[quote="Àëåêñàíäð Îáðåçêîâ;1119279"]ÿ íå çíàþ îòêóäà âçÿëñÿ âèðóñ, ïèñåì íå áûëî[/quote]Çíà÷èò ýòî ñäåëàë êòî-òî äðóãîé :)

Æäåì ëîã ÌÂÀÌ

[ATTACH]475704[/ATTACH]

 MBAM óäàëèòå (ïîìåñòèòå â êàðàíòèí):

[CODE]
Êëþ÷è ðååñòðà: 4
PUP.Optional.DealPly.A, HKLM\SOFTWARE\WOW6432NODE\DealPly, , [ba555004fa81d561b03f5336837fd927],
PUP.Optional.DealPly.A, HKU\S-1-5-21-3440248510-4244887649-2995399599-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DEALPLY, , [fc13c88ca5d6bb7bb543ceefa063f709],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3440248510-4244887649-2995399599-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\1I1T1Q1S, , [22ed13417cff3cfabcc97f27738fc13f],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3440248510-4244887649-2995399599-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [32dd421294e74beb6d257f3d0102a957],

Çíà÷åíèÿ ðååñòðà: 2
PUP.Optional.DealPly.A, HKU\S-1-5-21-3440248510-4244887649-2995399599-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\DEALPLY|Partner, iron, , [fc13c88ca5d6bb7bb543ceefa063f709]
PUP.Optional.InstallCore.A, HKU\S-1-5-21-3440248510-4244887649-2995399599-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 0M1S1H1K2U, , [32dd421294e74beb6d257f3d0102a957]

Ïàïêè: 4
PUP.Optional.DealPly.A, C:\Program Files (x86)\DealPly, , [d43bee667a0170c65362a6131ee510f0],
PUP.OPtional.Dealply.A, C:\Users\???°??N???\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly, , [3dd2a7ad2556a4923aaaa31841c26799],
PUP.Optional.DealPly.A, C:\Users\???°??N???\AppData\Roaming\DealPly, , [927dd0848af16dc9cf9098dee51db848],
PUP.Optional.DealPly.A, C:\Users\???°??N???\AppData\Roaming\DealPly\UpdateProc, , [927dd0848af16dc9cf9098dee51db848],

Ôàéëû: 15
PUP.Optional.Rambler.A, C:\Users\???°??N???\AppData\Local\Temp\RUpdate.exe, , [828dca8adba09b9bf21af82bc33d58a8],
PUP.Optional.DealPly.A, C:\Program Files (x86)\DealPly\DealPly.crx, , [d43bee667a0170c65362a6131ee510f0],
PUP.Optional.DealPly.A, C:\Program Files (x86)\DealPly\DealPly.xpi, , [d43bee667a0170c65362a6131ee510f0],
PUP.Optional.DealPly.A, C:\Program Files (x86)\DealPly\DealPlyIE64.dll, , [d43bee667a0170c65362a6131ee510f0],
PUP.Optional.DealPly.A, C:\Program Files (x86)\DealPly\icon.ico, , [d43bee667a0170c65362a6131ee510f0],
PUP.Optional.DealPly.A, C:\Program Files (x86)\DealPly\?˜???¤???*?????¦?˜??_??_???????˜?¤?*????????_?¤??????????.TXT, , [d43bee667a0170c65362a6131ee510f0],
PUP.OPtional.Dealply.A, C:\Users\???°??N???\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly\Uninstall DealPly.lnk, , [3dd2a7ad2556a4923aaaa31841c26799],
PUP.OPtional.Dealply.A, C:\Users\???°??N???\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly\DealPly Help.url, , [3dd2a7ad2556a4923aaaa31841c26799],
PUP.OPtional.Dealply.A, C:\Users\???°??N???\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly\DealPly.url, , [3dd2a7ad2556a4923aaaa31841c26799],
PUP.OPtional.Dealply.A, C:\Users\???°??N???\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly\?˜???¤???*?????¦?˜??_??_???????˜?¤?*????????_?¤??????????.TXT, , [3dd2a7ad2556a4923aaaa31841c26799],
PUP.Optional.DealPly.A, C:\Users\???°??N???\AppData\Roaming\DealPly\?˜???¤???*?????¦?˜??_??_???????˜?¤?*????????_?¤??????????.TXT, , [927dd0848af16dc9cf9098dee51db848],
PUP.Optional.DealPly.A, C:\Users\???°??N???\AppData\Roaming\DealPly\UpdateProc\config.dat, , [927dd0848af16dc9cf9098dee51db848],
PUP.Optional.DealPly.A, C:\Users\???°??N???\AppData\Roaming\DealPly\UpdateProc\?˜???¤???*?????¦?˜??_??_???????˜?¤?*????????_?¤??????????.TXT, , [927dd0848af16dc9cf9098dee51db848],
[/CODE]

Äëÿ îñòàëüíûõ îáúåêòîâ âûáåðèòå äåéñòâèå [B]Ignore[/B].

à ÷òî äåëàòü ñ êëþ÷àìè ðååñòðà è ñî çíà÷åíèÿìè? ïàïêè ñ ôàéëàìè ÿ òàê ïîíÿë óäàëèòü?

[COLOR="silver"]- - - Äîáàâëåíî - - -[/COLOR]

÷òî äåëàòü äàëüøå?

[QUOTE]à ÷òî äåëàòü ñ êëþ÷àìè ðååñòðà è ñî çíà÷åíèÿìè? ïàïêè ñ ôàéëàìè ÿ òàê ïîíÿë óäàëèòü?[/QUOTE]
ß íàïèñàë êàêèå çàïèñè â MBAM íóæíî óäàëèòü.

[QUOTE]÷òî äåëàòü äàëüøå?[/QUOTE]
Ïîêà íè÷åãî ó âàñ ñâåæàÿ âåðñèÿ øèôðàòîðà. Åñëè åñòü ëèöåíçèÿ íà àíòèâèðóñ DrWeb îáðàòèòåñü â èõ òåõïîääåðæêó âîçìîæíî îíè ñìîãóò âàì ïîìî÷ü.

ýõõ áåäà)

à êàê óçíàòü ïîÿâèëñÿ ëè äåøèôðàòîð?

Äëÿ íîâûõ ìîäèôèêàöèÿ Cryakl îí ñêîðåå âñåãî íå ïîÿâèòñÿ.