[Denesis]

Выполните в AVZ следующий скрипт:

begin
DelBHO('{F64CA09C-E258-42FA-996A-5DB534C9F960}');
QuarantineFile('logon.scr','');
QuarantineFile('C:\WINDOWS\system32\drivers\windrv r6.sys','');
QuarantineFile('C:\WINDOWS\system32\Drivers\uphcle anhlp.sys','');
QuarantineFile('spyj.sys','');
QuarantineFile('C:\WINDOWS\Temp\E_4\spec.fne','');
QuarantineFile('C:\WINDOWS\Temp\E_4\shell.fne','') ;
QuarantineFile('C:\WINDOWS\Temp\E_4\RegEx.fnr','') ;
QuarantineFile('C:\WINDOWS\Temp\E_4\krnln.fnr','') ;
QuarantineFile('C:\WINDOWS\Temp\E_4\internet.fne', '');
QuarantineFile('C:\WINDOWS\Temp\E_4\eAPI.fne','');
QuarantineFile('C:\WINDOWS\Temp\E_4\dp1.fne','');
QuarantineFile('C:\WINDOWS\Temp\E_4\com.run','');
TerminateProcessByName('c:\windows\system32\xp-2188f091.exe');
DeleteFile('c:\windows\system32\xp-2188f091.exe');
BC_DeleteFile('C:\WINDOWS\system32\XP-2188F091.EXE');
DeleteFile('C:\WINDOWS\winstart.bat');
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.