Sanitar Diska...

[Little Spy]

Выкладываю файлы...

[V_Bond]

выполните скрипт ...

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DelBHO('{E512DEAA-C987-47AA-B113-9D7289B91897}');
 DelBHO('{8F00D991-28CE-4AC6-ABDD-147AE67795F8}');
 DelBHO('{4E042D5E-3810-4640-80EE-8FC30ACE1D06}');
 QuarantineFile('C:\Documents and Settings\Little Spy\Local Settings\Temporary Internet Files\Content.IE5\MNYT0NCL\3077ahntdksr[1].dll','');
 DelBHO('{03E3D45B-681C-481C-B6A3-0D08B12C4AB9}');
 QuarantineFile('C:\WINDOWS\system32\ewpaoupw.dll','');
 QuarantineFile('C:\WINDOWS\system32\vtUkkljH.dll','');
 QuarantineFile('C:\WINDOWS\system32\yayaBrqQ.dll','');
 DeleteFile('C:\WINDOWS\system32\yayaBrqQ.dll');
 DeleteFile('C:\WINDOWS\system32\vtUkkljH.dll');
 DeleteFile('C:\WINDOWS\system32\ewpaoupw.dll');
 DeleteFile('yayaBrqQ.dll');
 DeleteFile('C:\Documents and Settings\Little Spy\Local Settings\Temporary Internet Files\Content.IE5\MNYT0NCL\3077ahntdksr[1].dll');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

пришлите карантин согласно приложения 3 правил ...
повторите логи ...

[Little Spy]

логи...

[V_Bond]

пофиксите ...

R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: (no name) - {03E3D45B-681C-481C-B6A3-0D08B12C4AB9} - C:\WINDOWS\system32\yayaBrqQ.dll (file missing)
O2 - BHO: (no name) - {413B7310-595C-4A16-9C26-F9E72D0DA7F4} - C:\WINDOWS\system32\vtUkkljH.dll (file missing)
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZKxdm022YYRU
O20 - Winlogon Notify: yayaBrqQ - C:\WINDOWS\

выполните скрипт ...

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DelBHO('{413B7310-595C-4A16-9C26-F9E72D0DA7F4}');
 DelBHO('{03E3D45B-681C-481C-B6A3-0D08B12C4AB9}');
 DeleteFile('C:\WINDOWS\system32\yayaBrqQ.dll');
 DeleteFile('C:\WINDOWS\system32\vtUkkljH.dll');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
end.

пришлите карантин согласно приложения 3 правил ...
повторите логи ...

[CyberHelper]

Статистика проведенного лечения:

• Получено карантинов: 1
• Обработано файлов: 4
• В ходе лечения обнаружены вредоносные программы:
  
  1. c:\\documents and settings\\little spy\\local settings\\temporary internet files\\content.ie5\\mnyt0ncl\\3077ahntdksr[1].dll - Rootkit.Win32.Podnuha.zn (DrWEB: Trojan.DownLoad.4182)
  2. c:\\windows\\system32\\ewpaoupw.dll - not-a-virus:AdWare.Win32.BHO.cbd (DrWEB: Trojan.BhoSearcher.5)
  3. c:\\windows\\system32\\vtukkljh.dll - Trojan.Win32.Monderc.gen (DrWEB: Trojan.Virtumod.based.21)
  4. c:\\windows\\system32\\yayabrqq.dll - Trojan.Win32.Monderc.gen (DrWEB: Trojan.Virtumod.based.21)