Download special avz in my signature.
Please unoad/disable your antivirus/firewall etc and disconnect from internet., disable system restore!!!
Execute this script in avzhttp://virusinfo.info/showthread.php?t=9207)
Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('E:\uvsqfgwd.cmd','');
QuarantineFile('E:\autorun.inf','');
QuarantineFile('D:\uvsqfgwd.cmd','');
QuarantineFile('D:\autorun.inf','');
QuarantineFile('C:\uvsqfgwd.cmd','');
QuarantineFile('C:\autorun.inf','');
QuarantineFile('c:\program files\google\googletoolbar1.dll','');
QuarantineFile('C:\WINDOWS\system32\afmain1.dll','');
QuarantineFile('C:\WINDOWS\system32\olhrwef.exe','');
QuarantineFile('C:\WINDOWS\system32\drivers\iksyssec.sys','');
QuarantineFile('C:\WINDOWS\system32\DRIVERS\lmimirr.sys','');
QuarantineFile('C:\WINDOWS\system32\Drivers\PxHelp20.sys','');
QuarantineFile('C:\WINDOWS\system32\Drivers\mchInjDrv.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\KCOM.SYS','');
QuarantineFile('C:\WINDOWS\system32\tpfmon.dll','');
QuarantineFile('C:\WINDOWS\system32\nmdfgds0.dll','');
QuarantineFile('C:\Program Files\Athan\vbh.dll','');
TerminateProcessByName('c:\windows\ahnrpta.exe');
QuarantineFile('c:\windows\ahnrpta.exe','');
TerminateProcessByName('c:\program files\athan\athan.exe');
QuarantineFile('c:\program files\athan\athan.exe','');
DeleteFile('c:\program files\athan\athan.exe');
DeleteFile('c:\windows\ahnrpta.exe');
DeleteFile('C:\Program Files\Athan\vbh.dll');
DeleteFile('C:\WINDOWS\system32\nmdfgds0.dll');
DeleteFile('C:\WINDOWS\system32\olhrwef.exe');
DeleteFile('C:\WINDOWS\system32\afmain1.dll');
DeleteFile('C:\autorun.inf');
DeleteFile('C:\uvsqfgwd.cmd');
DeleteFile('D:\autorun.inf');
DeleteFile('D:\uvsqfgwd.cmd');
DeleteFile('E:\autorun.inf');
DeleteFile('E:\uvsqfgwd.cmd');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(6);
ExecuteRepair(8);
ExecuteRepair(9);
RebootWindows(true);
end.
After your system will reboot, upload the quarantine according to App.3 of Rules (use : http://virusinfo.info/upload_virus_eng.php?tid=38265 )
It is not a good idea to use other "anti" along with kis, it just can bring some bugs
Uinstall all your "anti" If you want use kis, you should always use the latest version and make an updates.Go to http://www.kaspersky.com/kis_latest_versions
Make a new logs according to our rules http://virusinfo.info/showthread.php?t=9184