Зараженные процессы в памяти:
C:\Program Files\Common Files\System\sqlserv.exe (Trojan.Agent) -> No action taken.

Зараженные модули в памяти:
c:\WINDOWS\system32\idsasvstart.dll (Malware.Packer) -> No action taken.

Зараженные ключи в реестре:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\idssrv (Malware.Packer) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sqldebuger (Trojan.Agent) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Active Setup\Installed Components\{28abc5c0-4fcb-11cf-aax5-81cx1c635612} (Trojan.Agent) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Active Setup\Installed Components\{28abc5c0-4fcb-11cf-aax5-21cx1c987224} (Virus.Sality) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{8e8e8f8a-8fcc-88ce-bcb8-b8fd8e88888a} (Malware.Packer) -> No action taken.

Зараженные файлы:
c:\WINDOWS\system32\idsasvstart.dll (Malware.Packer) -> No action taken.
C:\Program Files\Common Files\System\sqlserv.exe (Trojan.Agent) -> No action taken.
C:\Documents and Settings\LocalService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\OV29SJU7\A16[1].exe (Malware.Packer) -> No action taken.
C:\Documents and Settings\LocalService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\OV29SJU7\A16[2].exe (Malware.Packer) -> No action taken.
C:\Documents and Settings\LocalService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\RVOL96EC\A16[1].exe (Malware.Packer) -> No action taken.
C:\Documents and Settings\LocalService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\RVOL96EC\A16[2].exe (Malware.Packer) -> No action taken.
C:\Documents and Settings\LocalService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\RVOL96EC\A16[3].exe (Malware.Packer) -> No action taken.
C:\Documents and Settings\LocalService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\RVOL96EC\A16[4].exe (Malware.Packer) -> No action taken.
C:\Documents and Settings\LocalService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\WXSHALOD\A16[1].exe (Malware.Packer) -> No action taken.
C:\Documents and Settings\NetworkService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\9JK4VZBE\epfsx[1].gif (Extension.Mismatch) -> No action taken.
C:\Documents and Settings\NetworkService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\9JK4VZBE\ohixnp[1].jpg (Worm.Conficker) -> No action taken.
C:\Documents and Settings\NetworkService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\9JK4VZBE\rloph[1].jpg (Extension.Mismatch) -> No action taken.
C:\Documents and Settings\NetworkService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\9JK4VZBE\utwdegx[1].gif (Extension.Mismatch) -> No action taken.
C:\Documents and Settings\NetworkService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\HRK81EH8\hggm[1].bmp (Extension.Mismatch) -> No action taken.
C:\Documents and Settings\NetworkService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\HRK81EH8\wvjtcvy[1].gif (Extension.Mismatch) -> No action taken.
C:\Documents and Settings\NetworkService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\HRX7LIJK\jywe[1].png (Worm.Conficker) -> No action taken.
C:\Documents and Settings\NetworkService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\HRX7LIJK\mynpe[1].bmp (Worm.Downadup) -> No action taken.
C:\Documents and Settings\NetworkService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\HRX7LIJK\rvim[1].bmp (Extension.Mismatch) -> No action taken.
C:\Documents and Settings\NetworkService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\RFTQ0SBC\bhkasii[1].gif (Worm.Conficker) -> No action taken.
C:\Documents and Settings\NetworkService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\RFTQ0SBC\mawnliz[1].jpg (Extension.Mismatch) -> No action taken.
C:\Documents and Settings\NetworkService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\RFTQ0SBC\mmog[1].jpg (Extension.Mismatch) -> No action taken.
C:\Documents and Settings\NetworkService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\RFTQ0SBC\restrzy[1].jpg (Extension.Mismatch) -> No action taken.
C:\Documents and Settings\NetworkService.NT AUTHORITY.002\Local Settings\Temporary Internet Files\Content.IE5\RFTQ0SBC\zmjfzcdl[1].bmp (Extension.Mismatch) -> No action taken.
C:\Program Files\xampp\xampp-portcheck.exe (Spyware.Onlinegames) -> No action taken.
C:\WINDOWS\system\csrss.exe (Trojan.Swisyn) -> No action taken.
C:\WINDOWS\system32\CDClose.dll (Malware.Packer) -> No action taken.
C:\WINDOWS\system32\gff6.exe (Trojan.Swisyn) -> No action taken.
C:\WINDOWS\system32\Mcaerfe.exe (Malware.NSPack) -> No action taken.
C:\WINDOWS\system32\dp1.fne (Worm.Autorun) -> No action taken.
C:\WINDOWS\system32\ldsasclib.dll (Malware.Packer) -> No action taken.
C:\WINDOWS\system32\wipsbde32.exe (Trojan.Downloader) -> No action taken.
C:\WINDOWS\system32\FK6ZQ4IO\E001.exe (Malware.Packer) -> No action taken.
C:\WINDOWS\system32\GI4E1UCZ\E001.exe (Malware.Packer) -> No action taken.

C:\WINDOWS\system32\GPIYQJW7\E001.exe (Malware.Packer) -> No action taken.
C:\WINDOWS\system32\IAZTFUBR\E001.exe (Malware.Packer) -> No action taken.
C:\WINDOWS\system32\IYPVB1ZE\E001.exe (Malware.Packer) -> No action taken.
C:\WINDOWS\system32\HKS53100\E001.exe (Malware.Packer) -> No action taken.
C:\WINDOWS\system32\FT0QMEYY\E001.exe (Malware.Packer) -> No action taken.
C:\WINDOWS\system32\G8XU3Y5G\E001.exe (Malware.Packer) -> No action taken.
C:\WINDOWS\system32\IMFX68P1\E001.exe (Malware.Packer) -> No action taken.
C:\WINDOWS\system32\IMNKKBBE\E001.exe (Malware.Packer) -> No action taken.
C:\WINDOWS\system32\ZF32BFND\A16.exe (Malware.Packer) -> No action taken.
C:\WINDOWS\system32\HUHBHKRO\E001.exe (Malware.Packer) -> No action taken.
C:\WINDOWS\system32\GWZI8KE4\E001.exe (Malware.Packer) -> No action taken.
C:\WINDOWS\system32\GYPIOG1R\E001.exe (Malware.Packer) -> No action taken

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 TerminateProcessByName('c:\windows\system32\427tneqm\p001.exe');
 TerminateProcessByName('c:\windows\system32\77er70f1\h001.exe');
 DeleteFile('c:\windows\system32\77er70f1\h001.exe');
 DeleteFile('c:\windows\system32\427tneqm\p001.exe');
 DeleteFile('C:\WINDOWS\system32\idsasvstart.dll');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\IdsSrv\Parameters','ServiceDll');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

Запустите MBAM 
- выберите Perform Full Scan (Провести полную проверку) 
- нажмите Scan (Проверить) 
- после сканирования выберите Ок и далее Show Results (Показать результаты) 
- нажмите Remove Selected (удалить выделенные).

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteFile('C:\Documents and Settings\Ильдар\Application Data\ltzqai.exe');
BC_ImportDeletedList;
ExecuteSysClean;
ExecuteRepair(1);
ExecuteRepair(13);
ExecuteWizard('TSW',2,3,true);
BC_Activate;
ClearHostsFile;
RebootWindows(true);
end.