O17 - HKLM\System\CCS\Services\Tcpip\..\{030CDF11-2CCD-482C-8B81-C01A2A14E225}: NameServer = 188.92.73.123,188.92.73.124
O17 - HKLM\System\CCS\Services\Tcpip\..\{D4E18E34-F8D4-4B17-A055-2CB5B6B0F32C}: NameServer = 188.92.73.123,188.92.73.124
O17 - HKLM\System\CCS\Services\Tcpip\..\{F2EDC32F-DE72-4A3C-9A33-E970CFFC8AB2}: NameServer = 188.92.73.123,188.92.73.124
O17 - HKLM\System\CS3\Services\Tcpip\..\{030CDF11-2CCD-482C-8B81-C01A2A14E225}: NameServer = 188.92.73.123,188.92.73.124
O17 - HKLM\System\CS4\Services\Tcpip\..\{030CDF11-2CCD-482C-8B81-C01A2A14E225}: NameServer = 188.92.73.123,188.92.73.124

Зараженные ключи в реестре:
HKEY_CLASSES_ROOT\idid (Trojan.Sasfix) -> No action taken.

Зараженные параметры в реестре:
HKEY_CURRENT_USER\Control Panel\don't load\scui.cpl (Hijack.SecurityCenter) -> No action taken.
HKEY_CURRENT_USER\Control Panel\don't load\wscui.cpl (Hijack.SecurityCenter) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\braviax (Trojan.Downloader) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\option_1 (Rootkit.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\option_2 (Rootkit.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\option_3 (Rootkit.Agent) -> No action taken.

Зараженные файлы:
C:\Documents and Settings\Админ\Application Data\avdrn.dat (Malware.Trace) -> No action taken.
C:\Documents and Settings\Админ\Application Data\wiaserva.log (Malware.Trace) -> No action taken.
C:\Program Files\Common Files\keylog.txt (Malware.Trace) -> No action taken.
C:\Documents and Settings\Админ\oashdihasidhasuidhiasdhiashdiuasdhasd (Malware.Trace) -> No action taken.

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('pxjiufm.sys','');
 DeleteFile('pxjiufm.sys');
BC_ImportAll;
ExecuteSysClean;
ExecuteWizard('SCU ',2,3,true);
BC_Activate;
RebootWindows(true);
end.