I think in your system is more than one spyware
Disconnect from internet and most important exit/disable your antivirus/firewall
execute this script in avz (http://virusinfo.info/showthread.php?t=9207 ):
Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DelBHO('{C9C42510-9B21-41c1-9DCD-8382A2D07C61}');
DelBHO('{0B1B0D47-95F7-4bad-9309-A945B655AE61}');
QuarantineFile('C:\WINDOWS\system32\digeste.dll','');
QuarantineFile('C:\Program Files\Search Settings\SearchSettings.exe','');
QuarantineFile('C:\WINDOWS\system32\Drivers\sddriver.sys','');
QuarantineFile('C:\WINDOWS\system32\DRIVERS\scrcap.sys','');
QuarantineFile('C:\WINDOWS\system32\iehelper.dll','');
QuarantineFile('C:\Program Files\Ask.com\Supertoolbar\GenericAskToolbar.dll','');
QuarantineFile('c:\program files\ventsrv\ventrilo_svc.exe','');
QuarantineFile('c:\program files\ventsrv\ventrilo_srv.exe','');
TerminateProcessByName('c:\windows\sysguard.exe');
QuarantineFile('c:\windows\sysguard.exe','');
QuarantineFile('c:\program files\curse\curseclient.exe','');
DeleteFile('c:\windows\sysguard.exe');
DeleteFile('C:\Program Files\Ask.com\Supertoolbar\GenericAskToolbar.dll');
DeleteFile('C:\WINDOWS\system32\iehelper.dll');
DeleteFile('C:\Program Files\Search Settings\SearchSettings.exe');
DeleteFile('C:\WINDOWS\system32\digeste.dll');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(6);
ExecuteRepair(8);
ExecuteRepair(9);
ExecuteRepair(16);
ExecuteRepair(2);
ExecuteRepair(4);
ExecuteRepair(12);
ExecuteRepair(13);
RebootWindows(true);
end.
Your system will reboot.
Upload all quarantined files according to Appendix #3 of Rules: http://virusinfo.info/showthread.php?t=9184 , using http://virusinfo.info/upload_virus_eng.php?tid=39173
Make logs again according to rules http://virusinfo.info/showthread.php?t=9184.