Como remover mensagem do virus http://disorderstatus.ru/order.php

Prezados,

Estou recebendo as mensagens de alerta anexadas.

Ja usei o procedimento descrito em https://forum.avast.com/index.php?topic=175708.0 e estou anexando além das mensagens de alerta os dois arquivos gerados pelo Farbar Recovery Scan Tool.

Grato,

-Luiz

Dear Gentlemen,

I would like to clean this laptop too.

The warning logs are attached.

Best,

-Luiz

Olá luiz.oliveira.

Vou verificar se existe um assistente de remoção da seção vírus and worms disponíveis no momento
se não, amanhã.O principal problema é a inconstância ou seja desistência
por favor não abandone o tópico

I will check if there is a removal assistant currently available section virus and worms
if not, tomorrow.

Jefferson,

Eu acabei de limpar o primeiro note que foi infectado, deu td certo.

Segui todas as instruções dadas pelo magna86 em https://forum.avast.com/index.php?topic=176088.msg1249701#msg1249701.

Sei que cada solução é customizada e não devo aplicar neste notebook.

Grato,

-Luiz

This is for ELANA-LAPTOP machine.


FIRST >>>>

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[b] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/b]
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

- Right-click on 

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
- Press the Fix button just once and wait.
- If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
- When finished FRST will generate a log on the Desktop, called Fixlog.txt.
Please attach it to your reply.

SECOND >>>>

AdwCleaner by Xplode

Download AdwCleaner from here or from here. Save the file to the desktop.

NOTE: If you are using IE 8 or above you may get a warning that stops the program from downloading. Just click on the warning and allow the download to complete.

Close all open windows and browsers.

- [b]Vista/7/8 users:[/b] Right click the [b]AdwCleaner[/b] icon on the desktop, click [b]Run as administrator[/b] and accept the UAC prompt to run AdwCleaner.

You will see the following console:

http://i1351.photobucket.com/albums/p785/dbreeze2/Scanners%20screens/AdwCleaner_v4111_zpsn56hzjza.png

- Click the [b]Scan[/b] button and wait for the scan to finish.
- After the Scan has finished the window may or may not show what it found and above, in the progress bar, you will see: [b]Waiting for action. Please uncheck elements you don't want to remove.[/b]
- Click the [b]Clean[/b] button.
- [b]Everything checked[/b] will be deleted.
- When the program has finished cleaning a report appears.
- Once done it will ask to reboot, allow this

http://1.bp.blogspot.com/-vitKqfMQS4o/UEDylIQ7HJI/AAAAAAAABLc/Hx-IwqKoaxg/s1600/adwcleaner_delete_restart.jpg

- On reboot a log will be produced; please attach that in your next reply. This report is also saved to [b]C:\AdwCleaner\AdwCleaner[C0].txt[/b]

Optional:

NOTE: If you see AVG Secure Search being targeted for deletion, Here’s Why and Here. You can always Reinstall it.

Luiz.oliveira

Não haveria necessidade de abrir outro tópico
desde que você já tem outro lhe ajudando.
se você já executou os passos devem aguardar a resposta, paciência você não pode executar a mesma correção no notebook, logs gerados é do outro notebook?
Magna86 offline no momento e voltará amanhã para continuar procedimentos.

There would be no need to open another topic
since you already have another helping.
if you already performed the steps should await the answer,patience you cannot run the fix same notebook, logs Farbar generated is another notebook ?
Magna86 offline at the moment and will return tomorrow to continue procedures.

jefferson sant > the OP has two different machines. This one is labeled ELANA-LAPTOP; the one Magna86 is working on is a different system.

Thanks for the clarification

Luiz.oliveira

Follow the instructions given above for dbrisendine
this is first presentation here in Forum Portuguese

Siga as instruções dadas acima brisendine
esta é a primeira apresentação dele aqui no Forum português.

Dear Gentlemen,

Thanks a lot for your help.

Attached is the log created by AdwCleaner.

Other than that, I created two posts because there were two notebooks infected. I will create just one if something happens in the future (hope not).

Best,

-Luiz

Thank you for the AdwCleaner log; looks like a lot of malware was removed by that program.

Did you run the Fixlist script also? Can you post the Fixlog.txt file?

Attached is the Fixlog.txt file.

How is the system running now?

Download MCShield to your desktop and install
It will initially run a scan and show the result as a toaster by the system clock
Then in the control centre select scanner and tick unhide items on flash drives

https://dl.dropbox.com/u/73555776/mcshield%20unhide.JPG

Plug in the drive (if the user has one; the infection comes from USB devices) and McShield will start a scan
Select logs and then copy/paste it to your next post

Dear Dbrisendine,

I am not getting any warning messages anymore.

Attached is the all scan file.

I took the liberty of attaching the log for AdwCleaner for your information.

Can you check it too?

Best,

-Luiz

Thank you for the logs. MCShield is doing its job and your drives a clean and protected by MCShield. The AdwCleaner scan only shows some questionable items; you can delete them if you want but they will not hurt to leave them also; your choice on this one.

If the system is running fine for you (since you are in front of it, not me) then we can clean the tools off the system and get it on its way.

Clean up of Malware Removal Tools
Now that we are through using these tools, let’s clean them off your system so that should you ever need to have malware removed again (we hope not) fresh, updated copies will be downloaded.

[]Download Delfix from here to your desktop and double click it to start the program
[*]Ensure Remove disinfection tools is ticked
Also tick:
[
]Activate UAC
[]Create registry backup
[
]Purge system restore
[*]Reset system settings

http://i1351.photobucket.com/albums/p785/dbreeze2/just%20stuff/DelFixSelectall_zps0f04cec4.png

[*]Click Run
[*]The program will run for a few moments and then notepad will open with a log. Please attach the log in your next reply.

You can delete any log files left on your desktop as these are no longer needed.

dbrisendine,

Attached is the log file for consideration.

Best,

-Luiz

Luiz

How’s your computer now?
I consider that this case has been solved or a problem?
I will notify just to check the situation log attached.

That looks good; thank you. Come back anytime you need help!

thanks a lot and enjoy your vacation.

best,

-luiz

a new date was set as of this week
Best regards.