rt752k,
В обязательно порядке отключить восстановление системы: Пуск-Панель управления-Система-вкладка "восстановление системы"-поставить птичку "Отключить восстановление"-применить.
Только после этого выполнить в avz:Файл-выполнить скрипт- в открывшееся окно внмательно вставить следующее:
Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteService('zksbhgpbb');
DeleteService('zaaubggonivegh');
DeleteService('yxqhlmynn');
DeleteService('ykruq');
DeleteService('xvpmv');
DeleteService('xrnilo');
DeleteService('xmiwpc');
DeleteService('xhqwjv');
DeleteService('xecns');
DeleteService('wzcdjr');
DeleteService('wezega');
DeleteService('vobobng');
DeleteService('tqxkwsn');
DeleteService('tgjqwbkxq');
DeleteService('sqoigvvsw');
DeleteService('qtgutvjrf');
DeleteService('pblekda');
DeleteService('otwlons');
DeleteService('ormrjwy');
DeleteService('nhyfxtnhi');
DeleteService('nadsl');
DeleteService('metsk');
DeleteService('ltggcy');
DeleteService('lfzqn');
DeleteService('kxvmlj');
DeleteService('jkuflgg');
DeleteService('ipgmozq');
DeleteService('hipdqw');
DeleteService('hcpllc');
DeleteService('gwlpeqsgf');
DeleteService('fryteuy');
DeleteService('fjuyhmic');
DeleteService('fjaszm');
DeleteService('fchkejf');
DeleteService('eugkntohc');
DeleteService('didnqb');
DeleteService('dawtroyi');
DeleteService('cxwhphkgr');
DeleteService('csiznykhk');
DeleteService('bhqogj');
DeleteService('bhgtbzgwa');
DeleteService('axrxsrlfo');
DeleteService('ajpnxh');
DeleteService('agrmsvljy');
DeleteFile('00000A10.sys');
DeleteFile('C:\WINDOWS\system32\05E.tmp');
DeleteFile('C:\WINDOWS\system32\021.tmp');
DeleteFile('C:\WINDOWS\system32\04C.tmp');
DeleteFile('C:\WINDOWS\system32\01.tmp');
DeleteFile('C:\WINDOWS\system32\06E.tmp');
DeleteFile('C:\WINDOWS\system32\09.tmp');
DeleteFile('C:\WINDOWS\system32\069.tmp');
DeleteFile('C:\WINDOWS\system32\039.tmp');
DeleteFile('C:\WINDOWS\system32\03D.tmp');
DeleteFile('C:\WINDOWS\system32\050.tmp');
DeleteFile('C:\WINDOWS\system32\022.tmp');
DeleteFile('C:\WINDOWS\system32\02A.tmp');
DeleteFile('C:\WINDOWS\system32\073.tmp');
DeleteFile('C:\WINDOWS\system32\090.tmp');
DeleteFile('C:\WINDOWS\system32\0B.tmp');
DeleteFile('C:\WINDOWS\system32\05C.tmp');
DeleteFile('C:\WINDOWS\system32\023.tmp');
DeleteFile('C:\WINDOWS\system32\081.tmp');
DeleteFile('C:\WINDOWS\system32\06.tmp');
DeleteFile('C:\WINDOWS\system32\059.tmp');
DeleteFile('C:\WINDOWS\system32\066.tmp');
DeleteFile('C:\WINDOWS\system32\08.tmp');
DeleteFile('C:\WINDOWS\system32\012.tmp');
DeleteFile('C:\WINDOWS\system32\068.tmp');
DeleteFile('C:\WINDOWS\system32\024.tmp');
DeleteFile('C:\WINDOWS\system32\06D.tmp');
DeleteFile('C:\WINDOWS\system32\017.tmp');
DeleteFile('C:\WINDOWS\system32\04.tmp');
DeleteFile('C:\WINDOWS\system32\032.tmp');
DeleteFile('C:\WINDOWS\system32\054.tmp');
DeleteFile('C:\WINDOWS\system32\01B.tmp');
DeleteFile('C:\WINDOWS\system32\026.tmp');
DeleteFile('C:\WINDOWS\system32\088.tmp');
DeleteFile('C:\WINDOWS\system32\027.tmp');
DeleteFile('C:\WINDOWS\system32\018.tmp');
DeleteFile('C:\WINDOWS\system32\062.tmp');
DeleteFile('C:\WINDOWS\system32\05B.tmp');
DeleteFile('C:\WINDOWS\system32\046.tmp');
DeleteFile('C:\WINDOWS\system32\041.tmp');
DeleteFile('C:\WINDOWS\system32\034.tmp');
DeleteFile('C:\WINDOWS\system32\042.tmp');
DeleteFile('zaaubggonivegh.sys');
DeleteFile('C:\WINDOWS\system32\03E.tmp');
DeleteFile('C:\WINDOWS\system32\0F.tmp');
DeleteFile('C:\WINDOWS\wt\updater\wcmdmgrl.exe');
DeleteFile('C:\WINDOWS\wt\webdriver\webdriver.dll');
DeleteFile('C:\WINDOWS\wt\webdriver\wthost.exe');
DeleteFile('C:\WINDOWS\wt\webdriver\wthostctl.dll');
DeleteFile('C:\WINDOWS\wt\webdriver\wtmulti.jar');
DeleteFile('C:\WINDOWS\wt\webdriver\wtwmplug.ax');
DeleteFile('C:\WINDOWS\wt\wtupdates\wtwebdriver\files\3.3.1.001\npwthost.dll');
DeleteFile('C:\WINDOWS\wt\wtupdates\wtwebdriver\files\3.3.1.001\webdriver.dll');
DeleteFile('C:\WINDOWS\wt\wtupdates\wtwebdriver\files\3.3.1.001\wthost.exe');
DeleteFile('C:\WINDOWS\wt\wtupdates\wtwebdriver\files\3.3.1.001\wthostctl.dll');
DeleteFile('C:\WINDOWS\wt\wtupdates\wtwebdriver\files\3.3.1.001\wtmulti.jar');
DeleteFile('C:\WINDOWS\wt\wtupdates\wtwebdriver\files\3.3.1.001\wtvh.dll');
DeleteFile('C:\WINDOWS\wt\wtupdates\wtwebdriver\files\3.3.1.001\wtwmplug.ax');
DeleteFile('C:\WINDOWS\wt\wtvh.dll');
DeleteFile('C:\WINDOWS\wt\updater\wtisa.dll');
DeleteFileMask('C:\WINDOWS\wt', '*.*', true);
ExecuteSysClean;
RebootWindows(true);
end.
Затем нажать "Запустить" ПРОИЗОЙДЕТ ПЕРЕЗАГРУЗКА!!!!
После перезагрузки выполнить в avz стандартный скрипт №2 и прислать архив virusinfo_syscheck