скринсейвер в виде БСОД

[sveloga]

и пропали вкладки на свойствах экрана.

[PavelA]

Выполнить:

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('E:\autorun.inf','');
 QuarantineFile('C:\WINDOWS\system32\709598\709598.dll','');
 QuarantineFile('C:\WINDOWS\system32\219725\219725.dll','');
 QuarantineFile('WinNt32.dll','');
 QuarantineFile('C:\WINDOWS\system32\ubpr01.exe','');
 QuarantineFile('C:\WINDOWS\system32\order.exe','');
 QuarantineFile('C:\WINDOWS\system32\drivers\spools.exe','');
 QuarantineFile('C:\WINDOWS\system32\avpo.exe','');
 QuarantineFile('C:\WINDOWS\system32\amvo.exe','');
 QuarantineFile('C:\Documents and Settings\1\Local Settings\Application Data\cftmon.exe','');
 BC_DeleteSvc('Xdi84');
 BC_DeleteSvc('Xdi05');
 BC_DeleteSvc('Vbg16');
 BC_DeleteSvc('symavc32');
 BC_DeleteSvc('Sye84');
 BC_DeleteSvc('Qvb27');
 BC_DeleteSvc('Oua73');
 BC_DeleteSvc('Oty27');
 BC_DeleteSvc('Mrw51');
 BC_DeleteSvc('Gmr62');
 BC_DeleteSvc('Din40');
 BC_DeleteSvc('Cin05');
 BC_DeleteSvc('Chm38');
 QuarantineFile('C:\WINDOWS\System32\Drivers\Afk51.sys','');
 BC_DeleteSvc('Afk51');
 DeleteFile('C:\WINDOWS\System32\Drivers\Afk51.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Chm38.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Cin05.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Din40.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Gmr62.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Mrw51.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Oty27.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Oua73.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Qvb27.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Sye84.sys');
 DeleteFile('C:\WINDOWS\system32\drivers\symavc32.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Vbg16.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Xdi05.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Xdi84.sys');
 DeleteFile('C:\Documents and Settings\1\Local Settings\Application Data\cftmon.exe');
 DeleteFile('C:\WINDOWS\system32\amvo.exe');
 DeleteFile('C:\WINDOWS\system32\avpo.exe');
 DeleteFile('C:\WINDOWS\system32\blphctcvj0e915.scr');
 DeleteFile('C:\WINDOWS\system32\drivers\spools.exe');
 DeleteFile('C:\WINDOWS\system32\order.exe');
 DeleteFile('C:\WINDOWS\system32\ubpr01.exe');
 DeleteFile('WinNt32.dll');
 DeleteFile('C:\WINDOWS\system32\219725\219725.dll');
 DeleteFile('C:\WINDOWS\system32\709598\709598.dll');
 DeleteFile('E:\autorun.inf');
BC_ImportAll;
ExecuteRepair(6);
ExecuteRepair(5);
ExecuteRepair(8);
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

Сделать новые логи.

Загрузить карантин по Правилам.

Отключить автозапуск флешек, см. тему в "Чаво"

[sveloga]

Новвыве логи:

[PavelA]

профиксить:

F2 - REG:system.ini: Shell=
O2 - BHO: 219725 helper - {6EA1DB25-2524-4DD6-B997-42E8F38C6E46} - C:\WINDOWS\system32\219725\219725.dll (file missing)
O2 - BHO: 709598 helper - {DCA2089A-9FFE-4025-869D-6DF987858DB9} - C:\WINDOWS\system32\709598\709598.dll (file missing)
O20 - Winlogon Notify: WinNt32 - C:\WINDOWS\

Еще проблемы остались?

[sveloga]

Спасибо. Проблем не видно.