I attached a screenshot of scanning for malware.
I ran 'delete the infected objects'. But it seems some of the infected objects were not deleted. Below is the log.
Thank you very much for your time.
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.orgВерсия базы данных: 5501
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180
11.01.2011 9:41:23
mbam-log-2011-01-11 (09-41-23).txt
Тип сканирования: Быстрое сканирование
Просканированные объекты: 202607
Времени прошло: 19 минут, 12 секунд
Заражённые процессы в памяти: 2
Заражённые модули в памяти: 1
Заражённые ключи в реестре: 10
Заражённые параметры в реестре: 7
Объекты реестра заражены: 3
Заражённые папки: 3
Заражённые файлы: 5
Заражённые процессы в памяти:
c:\program files\application updater\applicationupdater.exe (PUP.Dealio) -> 248 -> Not selected for removal.
c:\program files\search settings\searchsettings.exe (PUP.Dealio) -> 220 -> Not selected for removal.
Заражённые модули в памяти:
c:\program files\search settings\searchsettingsres409.dll (PUP.Dealio) -> Not selected for removal.
Заражённые ключи в реестре:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Application Updater (PUP.Dealio) -> Not selected for removal.
HKEY_CLASSES_ROOT\CLSID\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} (PUP.Dealio) -> Not selected for removal.
HKEY_CLASSES_ROOT\TypeLib\{CD082CCA-086F-4FD8-8FD7-247A0DBBD1CC} (PUP.Dealio) -> Not selected for removal.
HKEY_CLASSES_ROOT\Interface\{D5A1EF9A-7948-435D-8B87-D6A598317288} (PUP.Dealio) -> Not selected for removal.
HKEY_CLASSES_ROOT\SearchSettings.BHO.1 (PUP.Dealio) -> Not selected for removal.
HKEY_CLASSES_ROOT\SearchSettings.BHO (PUP.Dealio) -> Not selected for removal.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} (PUP.Dealio) -> Not selected for removal.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} (PUP.Dealio) -> Not selected for removal.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} (PUP.Dealio) -> Not selected for removal.
HKEY_CLASSES_ROOT\idid (Trojan.Sasfix) -> Quarantined and deleted successfully.
Заражённые параметры в реестре:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\PROGRAM FILES\APPLICATION UPDATER\APPLICATIONUPDATER.EXE (PUP.Dealio) -> Value: APPLICATIONUPDATER.EXE -> Not selected for removal.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\PROGRAM FILES\SEARCH SETTINGS\SEARCHSETTINGS.EXE (PUP.Dealio) -> Value: SEARCHSETTINGS.EXE -> Not selected for removal.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\SearchSettings (PUP.Dealio) -> Value: SearchSettings -> Not selected for removal.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\PROGRAM FILES\SEARCH SETTINGS\SEARCHSETTINGSRES409.DLL (PUP.Dealio) -> Value: SEARCHSETTINGSRES409.DLL -> Not selected for removal.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} (PUP.Dealio) -> Value: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} -> Not selected for removal.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\PROGRAM FILES\SEARCH SETTINGS\SEARCHSETTINGS.DLL (PUP.Dealio) -> Value: SEARCHSETTINGS.DLL -> Not selected for removal.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{E312764E-7706-43F1-8DAB-FCDD2B1E416D} (PUP.Dealio) -> Value: {E312764E-7706-43F1-8DAB-FCDD2B1E416D} -> Not selected for removal.
Объекты реестра заражены:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Заражённые папки:
c:\documents and settings\home.home-6867770527\application data\Dealio (PUP.Dealio) -> Not selected for removal.
c:\documents and settings\home.home-6867770527\application data\Dealio\res (PUP.Dealio) -> Not selected for removal.
c:\documents and settings\home.home-6867770527\application data\Dealio\temp (PUP.Dealio) -> Not selected for removal.
Заражённые файлы:
c:\program files\application updater\applicationupdater.exe (PUP.Dealio) -> Not selected for removal.
c:\program files\search settings\searchsettings.exe (PUP.Dealio) -> Not selected for removal.
c:\program files\search settings\searchsettingsres409.dll (PUP.Dealio) -> Not selected for removal.
c:\program files\search settings\searchsettings.dll (PUP.Dealio) -> Not selected for removal.
c:\documents and settings\home.home-6867770527\application data\Dealio\res\widgets.xml (PUP.Dealio) -> Not selected for removal.
You do not have the required permissions to view the files attached to this post.