disorder.ru/order Virus, help please.

system · 2015-11-22T17:12:12.000Z

I recently have a sudden pop ups from avast
URL: http://disorderstatus.ru/order.php
Infection: URL:Mal
Process: C:\Windows\SysWOW64\msiexec.exe

Thanks

Eddy · 2015-11-22T17:58:48.000Z

avast and Windows Defender enabled:
https://blog.kaspersky.com/multiple-antivirus-programs-bad-idea/2670/

Please install McShield and let it scan your USB stick(s).
Attach the log(s) to your next post and wait for a malware remover to guide you further.

system · 2015-11-22T18:11:00.000Z

it says that the pendrive is clean but, the avast pop up still appears, i used all the programs, the pop used to appear every min, now its like every 10 mins or more.

dbrisendine · 2015-11-22T19:46:01.000Z

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[b] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/b]Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
- Press the Fix button just once and wait.
- If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
- When finished FRST will generate a log on the Desktop, called Fixlog.txt.
  Please attach it to your reply.

system · 2015-11-22T20:25:10.000Z

Hi, here it is (maybe some parts in the txt will appear in spanish, i apologize for it)

dbrisendine · 2015-11-22T22:42:01.000Z

How is your system running now?

system · 2015-11-23T20:40:52.000Z

without virus, thank you so much!!!

dbrisendine · 2015-11-23T21:38:04.000Z

Let’s clean the tools off and get you on your way …

Clean up of Malware Removal Tools
Now that we are through using these tools, let’s clean them off your system so that should you ever need to have malware removed again (we hope not) fresh, updated copies will be downloaded.

[]Download Delfix from here to your desktop and double click it to start the program
[*]Ensure Remove disinfection tools is ticked
Also tick:
[]Activate UAC
[]Create registry backup
[]Purge system restore
[*]Reset system settings

http://i1351.photobucket.com/albums/p785/dbreeze2/just%20stuff/DelFixSelectall_zps0f04cec4.png

[*]Click Run
[*]The program will run for a few moments and then notepad will open with a log. Note: Please save this log first before rebooting your system (if asked to); DelFix does not save the log as it is trying to remove all traces of our work on your system. Please attach the log in your next reply.

You can delete any log files left on your desktop as these are no longer needed.

Announcements