[01pump]

XOMbl4,

Теперь выполните такой скрипт в avz

 
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('d:\windows\system32\rmmhtoc.dll');
DeleteFile('D:\WINDOWS\system32\RbmmtfC.dll');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\sfjieawr\Parameters','ServiceDll');
DeleteFile('D:\WINDOWS\system32\RhmwtdC.dll');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\MMeica\Parameters','ServiceDll');
DeleteFile('D:\WINDOWS\system32\RmmhtoC.dll');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\Metcwar\Parameters','ServiceDll');
DeleteFile('D:\WINDOWS\system32\RvmutlC.dll');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\MediaCenter\Parameters','ServiceDll');
DeleteFile('D:\WINDOWS\system32\RvmuttC.dll');
RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\BITS\Parameters','ServiceDll');
DeleteFile('H:\autorun.inf');
BC_ImportAll;
ExecuteSysClean;
RegKeyIntParamWrite('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer','NoDriveTypeAutoRun', 221); 
BC_Activate;
RebootWindows(true);
end.

После перезагрузки выполните в avz стандартный скрипт №2 и пришлите архив virusinfo_syscheck.zip