Tensen китайская вирус программа

[Гавриил Млечин]

Здравствуйте. постоянно вылазиют окошечки с китайскими иероглифами, программа не закрывается и не удаляется.

[Info_bot]

Уважаемый(ая) Гавриил Млечин, спасибо за обращение на наш форум!

Помощь при заражении комьютера на VirusInfo.Info оказывается абсолютно бесплатно. Хелперы, в самое ближайшее время, ответят на Ваш запрос. Для оказания помощи необходимо предоставить логи сканирования утилитами АВЗ и HiJackThis, подробнее можно прочитать в правилах оформления запроса о помощи.

Информация

Если вы хотите получить персональную гарантированную помощь в приоритетном режиме, то воспользуйтесь платным сервисом Помогите+.

Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста поддержите проект.

[SQ]

Здравствуйте,

PokerStar сами ставили?

Вам знакома?

Найден URL автонастройки браузера IE S-1-5-21-1275210071-926492609-527237240-1003\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings, AutoConfigURL="http://lider.obnet.ru:8080/config.script"

AVZ выполнить следующий скрипт.
Важно на ОС: Windows Vista/7/8/8.1 AVZ запускайте через контекстное меню проводника от имени Администратора.

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.'+#13#10+'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true); 
if not IsWOW64
 then
  begin
   SearchRootkit(true, true);
   SetAVZGuardStatus(True);
  end;
 DelCLSID('{63332668-8CE1-445D-A5EE-25929176714E}');
 DelCLSID('{CBDECEF7-7A29-4cbf-A009-2673D82C7BF9}');
 TerminateProcessByName('c:\program files\tencent\qqpcmgr\11.2.17058.221\plugins\qmnetmon\qqpcnetflow.exe');
 TerminateProcessByName('c:\program files\tencent\qqpcmgr\11.2.17058.221\qqpcrealtimespeedup.exe');
 TerminateProcessByName('c:\program files\tencent\qqpcmgr\11.2.17058.221\qqpcrtp.exe');
 TerminateProcessByName('c:\program files\tencent\qqpcmgr\11.2.17058.221\qqpctray.exe');
 StopService('bd0001');
 StopService('bd0004');
 StopService('BDArKit');
 StopService('BDMWrench');
 StopService('BDSafeBrowser');
 StopService('BDSGRTP');
 StopService('covowiso');
 StopService('QMIEProtect');
 StopService('QQPCRTP');
 StopService('softaal');
 StopService('TAOAccelerator');
 StopService('TAOKernelDriver');
 StopService('TS888');
 StopService('TsFltMgr');
 StopService('TSKSP');
 StopService('TSSK');
 StopService('WajaNetEn Monitor');
 DeleteService('bd0001');
 DeleteService('bd0004');
 DeleteService('BDArKit');
 DeleteService('BDMWrench');
 DeleteService('BDSafeBrowser');
 DeleteService('BDSGRTP');
 DeleteService('covowiso');
 DeleteService('QMIEProtect');
 DeleteService('QMUdisk');
 DeleteService('QQPCRTP');
 DeleteService('softaal');
 DeleteService('TAOAccelerator');
 DeleteService('TAOKernelDriver');
 DeleteService('TFsFlt');
 DeleteService('TS888');
 DeleteService('TsFltMgr');
 DeleteService('TSKSP');
 DeleteService('TSSK');
 DeleteService('WajaNetEn Monitor');
 QuarantineFile('C:\Documents and Settings\Андрей\Application Data\MyDesktop\linkme0120.exe','');
 QuarantineFile('C:\Documents and Settings\All Users\Application Data\Tencent\TSVulFw\TSVulFW.DAT','');
 QuarantineFile('C:\Program Files\03000200-1436257299-0500-0006-000700080009\knszFAE.tmp','');
 QuarantineFile('c:\program files\commfort\commfort.exe','');
 QuarantineFile('C:\Program Files\Common Files\Baidu\BaiduProtect1.3\1.3.0.622\BaiduProtect.exe','');
 QuarantineFile('C:\Program Files\PokerStars.NET\PokerStarsUpdate.exe','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\7z.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\AndroidAssistHelper.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\AndroidServer\1.0.0.511\AndroidDevice.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\AndroidServer\1.0.0.511\NetworkMgr.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\AndroidServer\1.0.0.511\QQPMIpc.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\AndroidServer\1.0.0.511\Sdkclient.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\CheckSysHung.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\communic.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\DLProtectComm.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\dr.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\exnscan.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\GameUpgrade.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\GarbageCleaner.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\GFCustom.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\GFFtsysCustom.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\MemDefrag.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\NetflowMgr.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\oDayProtect.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\QMBDScanner.dat','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\QMHipsEngine.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\qmiemalrtpplugin\qmiemalrtpplugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\QMNetMonPlugin.dll','');
 QuarantineFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\plugins\qmnetmon\qqpcnetflow.exe','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\QMRepairPlugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\sysspeeduprtpplugin\SysSpeedupRtpPlugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\ProcessManager.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMAntiInject.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMAssocScan.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMAVProxy.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMBrowserSafe.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMCommon.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMContextScan.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMContextUninstall.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMDlder.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMDns.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMEmMat.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMExt.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMFileMon.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMForbiddenWinKey.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMGCShellExt.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMHIPSHeart.dll','');
 QuarantineFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qmhipslogpolicy.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMHIPSPolicyEng.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMHIPSService.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMIEProtect.sys','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMIEProtectIo.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMIEsafeDll.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMInjectUtils.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMIpc.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMMain.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMNetworkMgr.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMRtpCheck.dll','');
 QuarantineFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qmrtpcontroller.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMRtpDLL.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMSafeBoxHelperDll.dll','');
 QuarantineFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qmscripthost.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMSpeedupPlugin\SpeedupRocket\SpeedupRocket.dll','');
 QuarantineFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qmsysrepprov.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\GameUpgradeTrayPlugin\GameUpgradeTrayPlugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMAutoTaskPlugin\QMAutoTaskPlugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMTrayPlugin\QMAutoTaskPlugin\SubPlugins\GameSpeedupExposure.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMTrayPlugin\QMAutoTaskPlugin\SubPlugins\SpeedupMsg.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMBJTrayPlugin\QMBJTrayPlugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMClinicTrayPlugin\QMClinicTrayPlugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMDnsMonitor\QMDnsMonitor.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMHwFloatWnd\QMHwFloatWnd.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMKCheck\QMKCheck.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMLogCtrl\QMLogCtrl.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMMobileTrayPlugin\QMMobileTrayPlugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMNewsTips\QMNewsTips.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMPerfCtrl\QMPerfCtrl.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMPreDownload\QMPreDownload.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMQQLoginPlugin\QMQQLoginPlugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMRtpPlugin\QMRtpPlugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMSccTrayPlugin\QMSccTrayPlugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMSoftPlugin\QMSoftPlugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMSpecTips\QMSpecTips.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMStartupMonitorNotify\QMStartupMonitorNotify.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMSwitchesMgrPlugin\QMSwitchesMgrPlugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMSXTrayPlugin\QMSXTrayPlugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMTPIEStartPage\QMTPIEStartPage.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMTpkTrayPlugin\QMTpkTrayPlugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMTrojanPlugin\QMTrojanPlugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMUDiskMgr\QMUDiskMgr.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMUpdateModule\QMUpdateModule.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMVulPlugin\QMVulPlugin.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMWebFWCtrl\QMWebFWCtrl.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMUdisk.sys','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMUl.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMWlanMacDll.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQFileFlt.dll','');
 QuarantineFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qqpcrealtimespeedup.exe','');
 QuarantineFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qqpcrtp.exe','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCTray.exe','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQSysMon.sys','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\scc.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\softaal.sys','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\SoftMgr\processlogdll.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\sqlite.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\StartupMgrDll.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\SXCombase.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAOBase.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAOClient.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAOKernelControl.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAVCache.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\tave.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAVEng.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAVInterface.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAVUpload.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\tpk\2.0.11144.1982\tpkcom.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\tpk\2.0.11144.1982\tpkproxy.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\tpk\2.0.11144.1982\tpkreport.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\tpk\2.0.11144.1982\tpktt.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TS888.sys','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TSKsp.sys','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TSPDLdr.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TSSysKit.sys','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TSSysKitProxy.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TSZip.dll','');
 QuarantineFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\UDiskShellExt.dll','');
 QuarantineFile('C:\Program Files\WajaNetEn\3dc1e14f305c7e5ba88e7e0a09eacbbf.exe','');
 QuarantineFile('C:\WINDOWS\system32\DRIVERS\bd0001.sys','');
 QuarantineFile('C:\WINDOWS\system32\DRIVERS\bd0002.sys','');
 QuarantineFile('C:\WINDOWS\system32\DRIVERS\bd0004.sys','');
 QuarantineFile('C:\WINDOWS\system32\DRIVERS\BDArKit.sys','');
 QuarantineFile('C:\WINDOWS\system32\DRIVERS\BDMWrench.sys','');
 QuarantineFile('C:\WINDOWS\system32\drivers\BDSafeBrowser.sys','');
 QuarantineFile('C:\WINDOWS\system32\Drivers\TAOAccelerator.sys','');
 QuarantineFile('C:\WINDOWS\system32\Drivers\TAOKernelXP.sys','');
 QuarantineFile('C:\WINDOWS\system32\Drivers\TFsFlt.sys','');
 QuarantineFile('C:\WINDOWS\system32\Drivers\TsFltMgr.sys','');
 QuarantineFile('C:\WINDOWS\system32\tssk.sys','');
 DeleteFile('C:\Documents and Settings\Андрей\Application Data\MyDesktop\linkme0120.exe','32');
 DeleteFile('C:\Documents and Settings\All Users\Application Data\Tencent\TSVulFw\TSVulFW.DAT','32');
 DeleteFile('C:\Program Files\03000200-1436257299-0500-0006-000700080009\knszFAE.tmp','32');
 DeleteFile('C:\Program Files\Common Files\Baidu\BaiduProtect1.3\1.3.0.622\BaiduProtect.exe','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\7z.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\AndroidAssistHelper.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\AndroidServer\1.0.0.511\AndroidDevice.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\AndroidServer\1.0.0.511\NetworkMgr.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\AndroidServer\1.0.0.511\QQPMIpc.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\AndroidServer\1.0.0.511\Sdkclient.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\CheckSysHung.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\communic.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\DLProtectComm.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\dr.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\exnscan.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\GameUpgrade.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\GarbageCleaner.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\GFCustom.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\GFFtsysCustom.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\MemDefrag.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\NetflowMgr.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\oDayProtect.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\QMBDScanner.dat','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\qmiemalrtpplugin\qmiemalrtpplugin.dll','32');
 DeleteFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\plugins\qmnetmon\qqpcnetflow.exe','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\QMRepairPlugin.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\sysspeeduprtpplugin\SysSpeedupRtpPlugin.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\ProcessManager.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\ptrate.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMAntiInject.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMAssocScan.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMAVProxy.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMBrowserSafe.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMCommon.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMContextScan.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMContextUninstall.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMDlder.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMDns.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMEmMat.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMExt.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMFileMon.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMForbiddenWinKey.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMGCShellExt.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMHIPSHeart.dll','32');
 DeleteFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qmhipslogpolicy.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMHIPSPolicyEng.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMHIPSService.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMIEProtect.sys','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMIEProtectIo.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMIEsafeDll.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMInjectUtils.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMIpc.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMMain.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMNetworkMgr.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMRtpCheck.dll','32');
 DeleteFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qmrtpcontroller.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMRtpDLL.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMSafeBoxHelperDll.dll','32');
 DeleteFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qmscripthost.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMSkinMgr.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMSpeedupPlugin\SpeedupRocket\SpeedupRocket.dll','32');
 DeleteFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qmsysrepprov.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\GameUpgradeTrayPlugin\GameUpgradeTrayPlugin.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMAutoTaskPlugin\QMAutoTaskPlugin.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMTrayPlugin\QMAutoTaskPlugin\SubPlugins\GameSpeedupExposure.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMTrayPlugin\QMAutoTaskPlugin\SubPlugins\GameSpeedupGiftBagMgr.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMTrayPlugin\QMAutoTaskPlugin\SubPlugins\SpeedupMsg.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMBJTrayPlugin\QMBJTrayPlugin.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMClinicTrayPlugin\QMClinicTrayPlugin.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMDnsMonitor\QMDnsMonitor.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMHwFloatWnd\QMHwFloatWnd.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMKCheck\QMKCheck.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMLogCtrl\QMLogCtrl.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMMobileTrayPlugin\QMMobileTrayPlugin.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMNewsTips\QMNewsTips.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMTrayPlugin\QMPerfCtrl\QMPerf.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMPerfCtrl\QMPerfCtrl.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMPreDownload\QMPreDownload.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMQQLoginPlugin\QMQQLoginPlugin.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMRtpPlugin\QMRtpPlugin.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMSccTrayPlugin\QMSccTrayPlugin.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMSoftPlugin\QMSoftPlugin.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMSpecTips\QMSpecTips.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMStartupMonitorNotify\QMStartupMonitorNotify.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMSwitchesMgrPlugin\QMSwitchesMgrPlugin.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMSXTrayPlugin\QMSXTrayPlugin.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMTPIEStartPage\QMTPIEStartPage.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMTpkTrayPlugin\QMTpkTrayPlugin.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMTrojanPlugin\QMTrojanPlugin.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMUDiskMgr\QMUDiskMgr.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMUpdateModule\QMUpdateModule.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\qmtrayplugin\QMWebFWCtrl\QMWebFWCtrl.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMUdisk.sys','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMUl.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMWlanMacDll.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQFileFlt.dll','32');
 DeleteFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qqpcrealtimespeedup.exe','32');
 DeleteFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qqpcrtp.exe','32');
 DeleteFile('c:\program files\tencent\qqpcmgr\11.2.17058.221\qqpctray.exe','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQSysMon.sys','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\scc.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\softaal.sys','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\SoftMgr\processlogdll.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\sqlite.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\StartupMgrDll.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\SXCombase.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAOBase.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAOClient.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAOKernelControl.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAOWorkFlowMgr.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAVCache.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\tave.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAVEng.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAVInterface.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TAVUpload.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\tpk\2.0.11144.1982\tpkcom.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\tpk\2.0.11144.1982\tpkproxy.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\tpk\2.0.11144.1982\tpkreport.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\tpk\2.0.11144.1982\tpktt.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TS888.sys','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TSKsp.sys','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TSPDLdr.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TSSysKit.sys','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TSSysKitProxy.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TSZip.dll','32');
 DeleteFile('C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\UDiskShellExt.dll','32');
 DeleteFile('C:\Program Files\WajaNetEn\3dc1e14f305c7e5ba88e7e0a09eacbbf.exe','32');
 DeleteFileMask('C:\Program Files\Tencent', '*', true, ' ');
 DeleteDirectory('C:\Program Files\Tencent');
 DeleteFileMask('C:\Program Files\Common Files\Baidu', '*', true, ' ');
 DeleteDirectory('C:\Program Files\Common Files\Baidu');
 DeleteFile('C:\WINDOWS\system32\DRIVERS\bd0001.sys','32');
 DeleteFile('C:\WINDOWS\system32\DRIVERS\bd0002.sys','32');
 DeleteFile('C:\WINDOWS\system32\DRIVERS\bd0004.sys','32');
 DeleteFile('C:\WINDOWS\system32\DRIVERS\BDArKit.sys','32');
 DeleteFile('C:\WINDOWS\system32\drivers\BDSafeBrowser.sys','32');
 DeleteFile('C:\WINDOWS\system32\Drivers\TAOAccelerator.sys','32');
 DeleteFile('C:\WINDOWS\system32\Drivers\TAOKernelXP.sys','32');
 DeleteFile('C:\WINDOWS\system32\Drivers\TFsFlt.sys','32');
 DeleteFile('C:\WINDOWS\system32\Drivers\TsFltMgr.sys','32');
 DeleteFile('C:\WINDOWS\system32\tssk.sys','32');
 DeleteFile('\??\C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TSKsp.sys','32'); 
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','MyDesktop');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','QQPCTray');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved','{63332668-8CE1-445D-A5EE-25929176714E}');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved','{CBDECEF7-7A29-4cbf-A009-2673D82C7BF9}');
 BC_ImportALL;
ExecuteSysClean;
 ExecuteRepair(3);
BC_Activate;
RebootWindows(true);
end.

После выполнения скрипта компьютер перезагрузится.

После перезагрузки:
- Выполните в AVZ:

begin
 CreateQurantineArchive(GetAVZDirectory+'quarantine.zip'); 
end.

Файл quarantine.zip из папки AVZ загрузите по ссылке "Прислать запрошенный карантин" вверху темы.


- - Сделайте лог Check Browsers' LNK и приложите его в теме.

- Подготовьте лог AdwCleaner и приложите его в теме.

[Гавриил Млечин]

ПокерСтар сам ставил. lider.obnet.ru сайт провайдера поидее

[SQ]

• Скачайте ClearLNK и сохраните архив с утилитой на рабочем столе.
• Распакуйте архив с утилитой в отдельную папку.
• Перенесите Check_Browsers_LNK.log на ClearLNK как показано на рисунке
  
  
  
• Отчет о работе ClearLNK-<Дата>.log будет сохранен в папке LOG.
• Прикрепите этот отчет к своему следующему сообщению.

Удалите в AdwCleaner всё, кроме папок с названиями программ которыми вы пользуетесь (если ничем из перечисленного в логе не пользуетесь, то удалите всё). Отчет после удаления прикрепите.

[Гавриил Млечин]

сделано

[SQ]

- Скачайте Farbar Recovery Scan Tool и сохраните на Рабочем столе.

Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.

• Запустите программу двойным щелчком. Когда программа запустится, нажмите Yes для соглашения с предупреждением.
• Убедитесь, что в окне Optional Scan отмечены "List BCD" и "Driver MD5".
  
• Нажмите кнопку Scan.
• После окончания сканирования будет создан отчет (FRST.txt) в той же папке, откуда была запущена программа. Пожалуйста, прикрепите отчет в следующем сообщении.
• Если программа была запущена в первый раз, будет создан отчет (Addition.txt). Пожалуйста, прикрепите его в следующем сообщении.

[Гавриил Млечин]

сделано

[SQ]

• Скопируйте приведенный ниже текст в Блокнот и сохраните файл как fixlist.txt в ту же папку откуда была запущена утилита Farbar Recovery Scan Tool:
  

  CreateRestorePoint:
  CloseProcesses:
  HKLM\...\Run: [ QQPCTray] => "C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCTray.exe"  /regrun
  HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
  HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "" <======= ATTENTION
  FF Plugin: @qq.com/npAndroidAssistant -> C:\Program Files\Common Files\Tencent\QQPhoneManager\2.0.201.3192\npQQPhoneManagerExt.dll [No File]
  FF Extension: No Name - C:\Documents and Settings\Андрей\Application Data\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\[email protected] [not found]
  FF Extension: No Name - C:\Documents and Settings\Андрей\Application Data\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\[email protected] [not found]
  FF Extension: No Name - C:\Documents and Settings\Андрей\Application Data\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7} [not found]
  FF Extension: No Name - C:\Documents and Settings\Андрей\Application Data\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\{d720d64d-c71a-4316-b59e-8a41b860178f} [not found]
  U4 TFsFlt; system32\Drivers\TFsFlt.sys [X]
  U4 TsFltMgr; system32\drivers\TsFltMgr.sys [X]
  2016-02-16 22:08 - 2016-02-19 13:58 - 00000000 ____D C:\Documents and Settings\袗薪写褉械泄\Local Settings\Temp
  2016-02-16 22:08 - 2016-02-18 16:46 - 00000000 ____D C:\Documents and Settings\袗薪写褉械泄
  2016-02-16 21:03 - 2016-02-16 21:03 - 00005120 _____ C:\Documents and Settings\Андрей\Application Data\GiftBag.db
  2016-02-16 21:03 - 2016-02-16 21:03 - 00000000 ____D C:\Documents and Settings\理漯彘\Application Data\Tencent
  2016-02-16 21:02 - 2016-02-16 21:02 - 00000000 ____D C:\Documents and Settings\All Users\TXQMPC
  2016-02-16 21:01 - 2016-02-16 21:01 - 00000000 ____D C:\Documents and Settings\LocalService\Application Data\Tencent
  2016-02-16 21:00 - 2016-02-16 21:00 - 00000839 _____ C:\Documents and Settings\All Users\Главное меню\强力卸载电脑上的软件 .lnk
  2016-02-16 21:00 - 2016-02-16 21:00 - 00000000 _____ C:\Documents and Settings\Андрей\Рабочий стол\$电脑管家-清理垃圾$.qmgc
  2016-02-16 20:57 - 2016-02-19 17:53 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Tencent
  2016-02-16 20:57 - 2016-02-16 20:57 - 00000000 ____D C:\Program Files\Tencent
  2016-02-16 20:44 - 2016-02-17 07:17 - 00000000 ____D C:\Documents and Settings\Андрей\Application Data\FreeVPN
  2016-02-16 20:44 - 2016-02-16 20:44 - 00000000 ____D C:\Program Files\Free VPN
  2016-02-16 20:44 - 2016-02-16 20:44 - 00000000 ____D C:\Documents and Settings\Андрей\Application Data\MyDesktop
  2016-02-16 20:44 - 2016-02-16 20:44 - 00000000 ____D C:\Documents and Settings\All Users\Главное меню\Программы\Free VPN
  2016-02-18 10:13 - 2015-07-07 14:21 - 00000000 ____D C:\Program Files\Baidu
  2016-02-18 10:13 - 2015-07-07 14:21 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Baidu
  2016-02-16 21:06 - 2015-07-07 14:27 - 00000000 ____D C:\Documents and Settings\理漯彘
  2016-02-16 20:46 - 2015-07-07 14:21 - 00000228 _____ C:\Documents and Settings\Андрей\Рабочий стол\Искать в Интернете.url
  2016-02-16 21:03 - 2016-02-16 21:03 - 0005120 _____ () C:\Documents and Settings\Андрей\Application Data\GiftBag.db
  2015-08-02 13:05 - 2015-08-02 13:05 - 0000438 _____ () C:\Documents and Settings\All Users\Application Data\fontcacheev1.dat
  C:\Documents and Settings\袗薪写褉械泄\Local Settings\Temp\TempQMSystemSetup_11.2.17058.221_1014728697(1).exe
  C:\Documents and Settings\袗薪写褉械泄\Local Settings\Temp\TempQMSystemSetup_11.2.17058.221_1014728697(2).exe
  C:\Documents and Settings\袗薪写褉械泄\Local Settings\Temp\TempQMSystemSetup_11.2.17058.221_1014728697(3).exe
  C:\Documents and Settings\袗薪写褉械泄\Local Settings\Temp\TempQMSystemSetup_11.2.17058.221_1014728697(4).exe
  C:\Documents and Settings\袗薪写褉械泄\Local Settings\Temp\TempQMSystemSetup_11.2.17058.221_1014728697.exe
  C:\Documents and Settings\袗薪写褉械泄\Local Settings\Temp\TempQQPhoneManager-5.5.1_710201.4892.pa(1).exe
  C:\Documents and Settings\袗薪写褉械泄\Local Settings\Temp\TempQQPhoneManager-5.5.1_710201.4892.pa(2).exe
  C:\Documents and Settings\袗薪写褉械泄\Local Settings\Temp\TempQQPhoneManager-5.5.1_710201.4892.pa(3).exe
  C:\Documents and Settings\袗薪写褉械泄\Local Settings\Temp\TempQQPhoneManager-5.5.1_710201.4892.pa.exe
  CustomCLSID: HKU\S-1-5-21-1275210071-926492609-527237240-1003_Classes\CLSID\{039B2CA5-3B41-4D93-AD77-47D3293FC5CB}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
  CustomCLSID: HKU\S-1-5-21-1275210071-926492609-527237240-1003_Classes\CLSID\{42481700-CF3C-4D05-8EC6-F9A1C57E8DC0}\InprocServer32 -> C:\Program Files\Skype\Plugin Manager\ezPMUtils.dll => No File
  [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Mozilla]
  DomainProfile\AuthorizedApplications: [C:\Program Files\Common Files\Baidu\BDDownload\108\bddownloader.exe] => Enabled:百度高速下载器
  DomainProfile\AuthorizedApplications: [C:\Program Files\Common Files\Tencent\QQDownload\130\Tencentdl.exe] => Enabled:腾讯产品下载组件
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCmgrInstallGuide.exe] => Enabled:????-????
  DomainProfile\AuthorizedApplications: [C:\Program Files\Common Files\Tencent\QQDownload\130\bugreport_xf.exe] => Enabled:腾讯产品下载组件Crash上报
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCTray.exe] => Enabled:????-????
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCMgr.exe] => Enabled:????-???
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCRTP.exe] => Enabled:????-??????
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMDL.exe] => Enabled:????-????
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\bugreport.exe] => Enabled:????-crash??
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCFileOpen.exe] => Enabled:????-??????
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCLeakScan.exe] => Enabled:????-????
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPConfig.exe] => Enabled:????-????
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCSoftMgr.exe] => Enabled:????-????
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\QMNetMon\QQPCNetFlow.exe] => Enabled:????-??????
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCBTU.exe] => Enabled:????-????
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCClinic.exe] => Enabled:????-????
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCLaunch.exe] => Enabled:????-QQPCLaunch
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMUpdate\QQPCMgrUpdate.exe] => Enabled:????-?????
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCSoftGame.exe] => Enabled:????-QQPCSoftGame
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCSysOptimize.exe] => Enabled:????-????
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCUpdateAVLib.exe] => Enabled:????-?????
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQRepair.exe] => Enabled:????-???
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCPatch.exe] => Enabled:????-QQPCPatch
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TpkUpdate.exe] => Enabled:????-?????????
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMRouterMgr.exe] => Enabled:????-?????
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMAccountProtection.exe] => Enabled:????-???
  DomainProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMAdBlock.exe] => Enabled:????-????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Common Files\Baidu\BDDownload\108\bddownloader.exe] => Enabled:百度高速下载器
  StandardProfile\AuthorizedApplications: [C:\Program Files\Common Files\Tencent\QQDownload\130\Tencentdl.exe] => Enabled:腾讯产品下载组件
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCmgrInstallGuide.exe] => Enabled:????-????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Common Files\Tencent\QQDownload\130\bugreport_xf.exe] => Enabled:腾讯产品下载组件Crash上报
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCTray.exe] => Enabled:????-????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCMgr.exe] => Enabled:????-???
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCRTP.exe] => Enabled:????-??????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMDL.exe] => Enabled:????-????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\bugreport.exe] => Enabled:????-crash??
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCFileOpen.exe] => Enabled:????-??????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCLeakScan.exe] => Enabled:????-????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPConfig.exe] => Enabled:????-????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCSoftMgr.exe] => Enabled:????-????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\plugins\QMNetMon\QQPCNetFlow.exe] => Enabled:????-??????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCBTU.exe] => Enabled:????-????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCClinic.exe] => Enabled:????-????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCLaunch.exe] => Enabled:????-QQPCLaunch
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMUpdate\QQPCMgrUpdate.exe] => Enabled:????-?????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCSoftGame.exe] => Enabled:????-QQPCSoftGame
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCSysOptimize.exe] => Enabled:????-????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCUpdateAVLib.exe] => Enabled:????-?????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQRepair.exe] => Enabled:????-???
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QQPCPatch.exe] => Enabled:????-QQPCPatch
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\TpkUpdate.exe] => Enabled:????-?????????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMRouterMgr.exe] => Enabled:????-?????
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMAccountProtection.exe] => Enabled:????-???
  StandardProfile\AuthorizedApplications: [C:\Program Files\Tencent\QQPCMgr\11.2.17058.221\QMAdBlock.exe] => Enabled:????-????
  EmptyTemp:
  Reboot:

• Запустите FRST и нажмите один раз на кнопку Fix и подождите.
• Программа создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении!
• Обратите внимание, что компьютер будет перезагружен.

[Гавриил Млечин]

сделано

[SQ]

Что с проблемой?

[Гавриил Млечин]

остались ярлыки в в панели "пуск".

[SQ]

Приложите новый FRST.

[CyberHelper]

Статистика проведенного лечения:

• Получено карантинов: 1
• Обработано файлов: 404
• В ходе лечения вредоносные программы в карантинах не обнаружены