Please disconnect from internet, disable your protection software (including PC Tools ThreatFire), disable system restore.
Execute this script:
Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DelBHO('{B494E7BB-1E33-4922-A947-F74EFF4E714F}');
QuarantineFile('C:\Program Files\VResLab\VResLabWarning.dll','');
QuarantineFile('C:\WINDOWS\system32\dla\tfswctrl.exe','');
QuarantineFile('C:\WINDOWS\system32\XDva028.sys','');
QuarantineFile('C:\WINDOWS\system32\XDva016.sys','');
QuarantineFile('C:\WINDOWS\system32\XDva014.sys','');
QuarantineFile('C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe','');
DeleteFile('C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe');
DeleteFile('C:\Program Files\VResLab\VResLabWarning.dll');
BC_ImportAll;
ExecuteSysClean;
ExecuteRepair(6);
ExecuteRepair(8);
ExecuteRepair(9);
BC_Activate;
RebootWindows(true);
end.
You computer will reboot.
Pack ( zip) (with pass 'virus') "Qurantine_AVZ" ( it is subfolder where your avptool exist)
Please upload it by link http://virusinfo.info/upload_virus_eng.php?tid=33296
Then,you should disable your protection software again, start internet explorer and other browser you might using and make an another log with avptool, please attach it to the next post.