subj. Amigo, Odnoklassniki and so on
Hello,
What makes you say that these software are malicious and have to be removed ?
because these programs are installed along with other necessary programs, and are not removed through Add or Remove Programs applet setup
AdwCleaner and now finds and removes it, for example log
# AdwCleaner v5.201 - Logfile created 12/08/2016 at 09:07:29 # Updated 30/06/2016 by ToolsLib # Database : 2016-08-12.1 [Server] # Operating system : Microsoft Windows XP Service Pack 3 (X86) # Username : User - A75751305 # Running from : C:\Documents and Settings\User\Desktop\adwcleaner_5.201.exe # Option : Scan # Support : https://toolslib.net/forum ***** [ Services ] ***** Service Found : Updater.Mail.Ru ***** [ Folders ] ***** Folder Found : C:\Documents and Settings\All Users\Application Data\Mail.Ru Folder Found : C:\Program Files\Mail.Ru ***** [ Files ] ***** ***** [ DLL ] ***** ***** [ WMI ] ***** ***** [ Shortcuts ] ***** Shortcut Infected : C:\Documents and Settings\All Users\Desktop\Mozilla Firefox.lnk ( hxxp://start.webalta.ru ) Shortcut Infected : C:\Documents and Settings\All Users\Desktop\Opera.lnk ( hxxp://start.webalta.ru ) ***** [ Scheduled tasks ] ***** ***** [ Registry ] ***** Key Found : HKLM\SOFTWARE\Clients\StartMenuInternet\amigo.exe Key Found : HKLM\SOFTWARE\Clients\StartMenuInternet\Amigo.SC6QBJT2RBLIXCXIAUHQJLU27M Key Found : HKLM\SOFTWARE\Classes\nsWebAlta.WebAltaSearchBar Key Found : HKCU\Software\Classes\CLSID\{A2DF06F9-A21A-44A8-8A99-8B9C84F29161} Key Found : HKLM\SOFTWARE\Classes\CLSID\{FE704BF8-384B-44E1-8CF2-8DBEB3637A8A} Key Found : HKLM\SOFTWARE\Classes\CLSID\{8E8F97CD-60B5-456F-A201-73065652D099} Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E8F97CD-60B5-456F-A201-73065652D099} Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FE704BF8-384B-44E1-8CF2-8DBEB3637A8A} Key Found : HKCU\Software\Mail.Ru Key Found : HKCU\Software\Amigo Key Found : HKLM\SOFTWARE\Mail.Ru Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Webalta Toolbar Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WebaltaService Key Found : HKU\.DEFAULT\Software\Mail.Ru Key Found : HKU\S-1-5-21-823518204-796845957-682003330-1003\Software\Mail.Ru Key Found : HKU\S-1-5-21-823518204-796845957-682003330-1003\Software\Amigo Key Found : HKU\S-1-5-21-823518204-796845957-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Uninstall\MailRuUpdater Key Found : HKU\S-1-5-21-823518204-796845957-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Uninstall\Webalta Toolbar Key Found : HKU\S-1-5-21-823518204-796845957-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Uninstall\Amigo Key Found : HKU\S-1-5-18\Software\Mail.Ru Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{61EB20A4-D4D5-4276-A2C9-DCCE8CE9F633} Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7} Key Found : HKU\S-1-5-21-823518204-796845957-682003330-1003\Software\Microsoft\Internet Explorer\SearchScopes\{61EB20A4-D4D5-4276-A2C9-DCCE8CE9F633} Key Found : HKU\S-1-5-21-823518204-796845957-682003330-1003\Software\Microsoft\Internet Explorer\SearchScopes\{FFEBBF0A-C22C-4172-89FF-45215A135AC7} Value Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [MailRuUpdater] Value Found : HKU\S-1-5-21-823518204-796845957-682003330-1003\Software\Microsoft\Windows\CurrentVersion\Run [MailRuUpdater] ***** [ Web browsers ] ***** ************************* C:\AdwCleaner\AdwCleaner[S1].txt - [3498 bytes] - [12/08/2016 09:07:29] ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [3571 bytes] ##########
but files and shortcuts is not removed
1) The folders will be deleted and the files as well.
2) There were no shortcuts on my test system and that's why they are not in the log. Otherwise they would be deleted.
If AdwCleaner don't delete those files on your system:
1) Check that you use the latest version of the program and please share the whole logfile.
2) Please write what files are not deleted.
Vous devez être connecté afin de pouvoir ajouter une réponse à cette discussion.
Get Malwarebytes for powerful protection against adware and threats.