Russian website at Win10 startup explorer.exe http://ozirizsoos.info

Viruses and worms
1

Hello,
I have localized the registry entry for this annoying website at startup
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ My username REG_SZ explorer.exe http://ozirizsoos.info

But each time I delete it it keeps comming back after reboot.
I have run many virus scans and software and nothing helps.
Please help

2

Have you tried AdwCleaner ? >> https://www.malwarebytes.com/adwcleaner/

3

Yes I have. Didnt help

4

Is it something dangerous? I have sensitive data… Dont know if I should reinstall windows.

5

Follow instructions and attach requested logs >> https://forum.avast.com/index.php?topic=194892.0

Is it something dangerous?
the dangerous stuff is the one you can't see, this seems to be some browser hijack crap
6

Thanks Pondus. Attached are the files

7

Malware experts is notified. It may take hours before one is online

8

The FRST logs are missing…!!

9

Please follow the directions for scans in this topic and attach as many of the logs as you can run.
Logs to assist in cleaning malware

Malwarebytes Anti-Malware log, the FRST.txt and the Addition.txt logs. Thanks.

The Malwarebytes log is clean so you don’t have to post it again. The other two are needed.