"Pushbot.vr" problem

To sam i mislio, ali da li to znaci da ocisti/obrise [Unregister Dlls]/[Registry - Safe List]?

npr: YN = obrisi dll ali ostavi Registry?

da, sad pokreni malwarebytes, ne brini neće smetati računalu

@Total

Da li bi sad trebao u OTS oznacit ove stavke dole i napisat YY?

ekrn.exe -> C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -> [2009-05-14 15:47:54 | 000,731,840 | ---- | M] (ESET)
egui.exe -> C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe -> [2009-05-14 15:47:08 | 002,029,640 | ---- | M] (ESET)
 
[Modules - No Company Name]
(EhttpSrv) ESET HTTP Server [On_Demand | Stopped] -> C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -> [2009-05-14 15:54:22 | 000,020,680 | ---- | M] (ESET)
(ekrn) ESET Service [Auto | Running] -> C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -> [2009-05-14 15:47:54 | 000,731,840 | ---- | M] (ESET)
 
[Driver Services - Safe List]
(epfwwfpr) epfwwfpr [Kernel | Auto | Running] -> C:\Windows\System32\drivers\epfwwfpr.sys -> [2009-05-14 15:49:34 | 000,093,312 | ---- | M] (ESET)
(ehdrv) ehdrv [Kernel | System | Running] -> C:\Windows\System32\drivers\ehdrv.sys -> [2009-05-14 15:47:14 | 000,107,256 | ---- | M] (ESET)
(eamon) eamon [File_System | Auto | Running] -> C:\Windows\System32\drivers\eamon.sys -> [2009-05-14 15:41:10 | 000,114,472 | ---- | M] (ESET)
 
[Registry - Safe List]
"egui" -> C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe ["C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice] -> [2009-05-14 15:47:08 | 002,029,640 | ---- | M] (ESET)
\Internet Settings\ZoneMap\Domains\ ->

Evo poceo je Full Scan, sad ga cekam , a i stavio sam za pocetak 14dana Triala FullVerzije , tako da mi je sada osiguran realtime full protection od njega.... a nakon ce se vratiti na normalno ...
Auu za sada imam 1 objekat koji je detektovao :(((?! 

Ocu, deaktivirat cu...
Au evo cim je dosao do Program Files/Microsoft/Crypt... nasao 2 :(.... 

kad završi malwarebytes scan, uradi ovako

otvori OTS i ovo kopiraj u prazno polje

[Kill All Processes]

[Unregister Dlls]

[Processes - Safe List]

YY -> ekrn.exe -> C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

YY -> egui.exe -> C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe

[Win32 Services - Safe List]

YY -> (EhttpSrv) ESET HTTP Server [On_Demand | Stopped] -> C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe

YY -> (ekrn) ESET Service [Auto | Running] -> C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

[Driver Services - Safe List]

YY -> (epfwwfpr) epfwwfpr [Kernel | Auto | Running] -> C:\Windows\System32\drivers\epfwwfpr.sys

YY -> (ehdrv) ehdrv [Kernel | System | Running] -> C:\Windows\System32\drivers\ehdrv.sys

YY -> (eamon) eamon [File_System | Auto | Running] -> C:\Windows\System32\drivers\eamon.sys

[Registry - Safe List]

< Internet Explorer Settings [HKEY_CURRENT_USER\] > -> 

YN -> HKEY_CURRENT_USER\: Main\\"bProtector Start Page" -> http://google.com/

< Run [HKEY_LOCAL_MACHINE\] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

YY -> "egui" -> C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe ["C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice]

< AppInit_DLLs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs

*AppInit_DLLs* -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_Dlls

YN -> c:\PROGRA~2\BPROTE~1\22432~1.10\protector.dll -> 

< AppInit_DLLs [HKEY_LOCAL_MACHINE] > -> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs

[Files/Folders - Created Within 30 Days]

NY ->  searchplugins -> C:\searchplugins

NY ->  searchplugins -> C:\Windows\System32\searchplugins

NY ->  bProtectorForWindows -> C:\ProgramData\bProtectorForWindows

NY ->  1 C:\Windows\*.tmp files -> C:\Windows\*.tmp

[Files/Folders - Modified Within 30 Days]

NY ->  30 C:\Users\User\AppData\Local\Temp\*.tmp files -> C:\Users\User\AppData\Local\Temp\*.tmp

NY ->  1 C:\Windows\*.tmp files -> C:\Windows\*.tmp

:Files

C:\Program Files\ESET

ipconfig /flushdns /c

:end

[Purity]

[Empty Temp Folders]

[EmptyFlash]

[EmptyJava]

[Start Explorer]

[Reboot]

klik na RUN FIX

-log koji dobiješ kopiraj

nakon toga instaliraj antivirus koji želiš

kopiraj log kad završi

ne zaboravi isključiti malwarebytes real time zaštitu prije nego što pokreneš OTS

type:incoming

dakle nije problem...ovo ćeš rješiti instalacijom nekog firewalla 

problem bi bio kad bi bilo ovo

type:outgoing

naravno da će biti sve ok, na računalu nema više aktivnog malware-a, dakle računalo je čisto što se malware-a tiče

ostaje ti promijeniti antivirus i instalirati neki firewall i nakon toga bi trebalo biti sve ok

da. kad se izvrši OTS skripta možeš instairati drugi antivirus i firewall

samo polako

to je adware i PUP, označi ih sve i klik na ukloni odabrano

Tu sam, sacu da pokrenem OTS...

Jel sve OK ?

E Hvaala ti puno!
I samo mi reci koji mi antivirus preporucujes :)?