это удалите в мбам
[QUOTE]Ключи реестра: 16
Trojan.BHO, HKLM\SOFTWARE\CLASSES\TYPELIB\{A8954909-1F0F-41A5-A7FA-3B376D69E226}, , [ae3fd892e5a5aa8c1a2392d2b152966a],
Trojan.BHO, HKLM\SOFTWARE\CLASSES\INTERFACE\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91}, , [ae3fd892e5a5aa8c1a2392d2b152966a],
Trojan.BHO, HKLM\SOFTWARE\CLASSES\INTERFACE\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}, , [ae3fd892e5a5aa8c1a2392d2b152966a],
Trojan.BHO, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91}, , [ae3fd892e5a5aa8c1a2392d2b152966a],
Trojan.BHO, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}, , [ae3fd892e5a5aa8c1a2392d2b152966a],
Trojan.BHO, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{967A494A-6AEC-4555-9CAF-FA6EB00ACF91}, , [ae3fd892e5a5aa8c1a2392d2b152966a],
Trojan.BHO, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{9692BE2F-EB8F-49D9-A11C-C24C1EF734D5}, , [ae3fd892e5a5aa8c1a2392d2b152966a],
Trojan.BHO, HKLM\SOFTWARE\WOW6432NODE\CLASSES\TYPELIB\{A8954909-1F0F-41A5-A7FA-3B376D69E226}, , [ae3fd892e5a5aa8c1a2392d2b152966a],
Trojan.BHO, HKLM\SOFTWARE\CLASSES\WOW6432NODE\TYPELIB\{A8954909-1F0F-41A5-A7FA-3B376D69E226}, , [ae3fd892e5a5aa8c1a2392d2b152966a],
Trojan.BHO, HKU\S-1-5-21-1316311504-1695488031-2430282664-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{0CB66BA8-5E1F-4963-93D1-E1D6B78FE9A2}, , [bb326604008a979f5343b0b1dd2638c8],
Trojan.BHO, HKLM\SOFTWARE\CLASSES\APIHelper.BhoApp, , [bb326604008a979f5343b0b1dd2638c8],
Trojan.BHO, HKLM\SOFTWARE\CLASSES\APIHelper.BhoApp.1, , [bb326604008a979f5343b0b1dd2638c8],
Trojan.BHO, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APIHelper.BhoApp, , [bb326604008a979f5343b0b1dd2638c8],
Trojan.BHO, HKLM\SOFTWARE\WOW6432NODE\CLASSES\APIHelper.BhoApp.1, , [bb326604008a979f5343b0b1dd2638c8],
Trojan.BHO, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APIHelper.BhoApp, , [bb326604008a979f5343b0b1dd2638c8],
Trojan.BHO, HKLM\SOFTWARE\CLASSES\WOW6432NODE\APIHelper.BhoApp.1, , [bb326604008a979f5343b0b1dd2638c8], [/QUOTE]
далее,
3.сделайте проверку в АдвКлинере
http://forum.esetnod32.ru/forum9/topic7084/
*****
4.в АдвКлинере, после завершения проверки,
в секции [b]Папки[/b] снимите галки с записей mail.ru, yandex (если есть такие)
остальное удалите по кнопке [b]Очистить[/b]
далее,
5.сделайте проверку в FRST
http://www.cyberforum.ru/viruses-faq/thread1362245.html