HELP: disorderstatus.ru/order.php and differentia.ru/diff.php

Viruses and worms
1

After using an infected USB thumbdrive, avast is blowing up constantly with these two messages. Attached are my MBAM, FRST, and aswMBR logs.

2

And this is the MCShield log just in case.

3

This should stop it

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: HKLM-x32\...\Run: [] => [X] URLSearchHook: HKLM-x32 - (No Name) - {37483b40-c254-4a72-bda4-22ee90182c1e} - No File URLSearchHook: HKU\S-1-5-21-3798191294-2567290701-1328403940-1001 - (No Name) - {37483b40-c254-4a72-bda4-22ee90182c1e} - No File Toolbar: HKU\S-1-5-21-3798191294-2567290701-1328403940-1001 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File Toolbar: HKU\S-1-5-21-3798191294-2567290701-1328403940-1001 -> No Name - {37483B40-C254-4A72-BDA4-22EE90182C1E} - No File 2015-08-30 22:29 - 2014-06-02 22:59 - 00000000 ____D C:\Program Files (x86)\YTD Toolbar 2010-11-21 11:24 - 2010-11-21 11:24 - 71805824 ___SH () C:\ProgramData\msaxdz.exe Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: Reg Delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F Reg: Reg Add "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F Hosts: RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

4

Thanks for the help, here is that fixlog.

5

Any further problems ?