помогите

[zasdcx]

помогите пожалуйста ничего не могу поделать с вирусом malware doctor

[Numb]

Программа AVZ - файл - выполнить скрипт - выполните скрипт:

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('D:\Program Files\ESET\CyberMania.exe','');
 QuarantineFile('D:\Documents and Settings\LocalService\Application Data\1361538659.exe','');
 QuarantineFile('D:\WINDOWS\\SystemRoot\System32\drivers\vidstub.sys','');
 QuarantineFile('D:\WINDOWS\System32\Drivers\AFPAnsi.sys','');
 QuarantineFile('D:\WINDOWS\System32\avast!AVSControlService.exe','');
 QuarantineFile('D:\WINDOWS\system32\Drivers\AFPAnsi.sys','');
 QuarantineFile('D:\WINDOWS\system32\DRIVERS\hwpsgt.sys','');
 QuarantineFile('D:\WINDOWS\system32\DRIVERS\lemsgt.sys','');
 QuarantineFile('D:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\FNAME.DLL','');
 QuarantineFile('D:\PROGRA~1\COMMON~1\MICROS~1\SMARTT~1\1049\stintl.dll','');
 QuarantineFile('D:\Program Files\Kwinzy\kwinzy.exe','');
 QuarantineFile('D:\Program Files\Kwinzy\kwinzy.dll','');
 QuarantineFile('D:\Documents and Settings\All Users\Application Data\Kwinzy\kwinzy119.exe','');
 QuarantineFile('d:\documents and settings\all users\application data\kwinzy\kwinzy119.exe','');
 QuarantineFile('d:\program files\kwinzy\kwinzy.exe','');
 QuarantineFile('d:\windows\system32\avast!avscontrolservice.exe','');
 QuarantineFile('d:\documents and settings\localservice\application data\1361538659.exe','');
 TerminateProcessByName('d:\documents and settings\all users\application data\kwinzy\kwinzy119.exe');
 TerminateProcessByName('d:\program files\kwinzy\kwinzy.exe');
 TerminateProcessByName('d:\windows\system32\avast!avscontrolservice.exe');
 TerminateProcessByName('d:\documents and settings\localservice\application data\1361538659.exe');
 StopService('Kwinzy Service');
 StopService('avast!AVSControlService');
 SetServiceStart('Kwinzy Service', 4);
 SetServiceStart('avast!AVSControlService', 4);
 DeleteFile('d:\documents and settings\localservice\application data\1361538659.exe');
 BC_DeleteFile('d:\documents and settings\localservice\application data\1361538659.exe');
 DeleteFile('d:\windows\system32\avast!avscontrolservice.exe');
 BC_DeleteFile('d:\windows\system32\avast!avscontrolservice.exe');
 DeleteFile('d:\program files\kwinzy\kwinzy.exe');
 BC_DeleteFile('d:\program files\kwinzy\kwinzy.exe');
 DeleteFile('d:\documents and settings\all users\application data\kwinzy\kwinzy119.exe');
 BC_DeleteFile('d:\documents and settings\all users\application data\kwinzy\kwinzy119.exe');
 DeleteFile('D:\Documents and Settings\All Users\Application Data\Kwinzy\kwinzy119.exe');
 BC_DeleteFile('D:\Documents and Settings\All Users\Application Data\Kwinzy\kwinzy119.exe');
 DeleteFile('D:\Program Files\Kwinzy\kwinzy.dll');
 BC_DeleteFile('D:\Program Files\Kwinzy\kwinzy.dll');
 DeleteFile('D:\Program Files\Kwinzy\kwinzy.exe');
 BC_DeleteFile('D:\Program Files\Kwinzy\kwinzy.exe');
 DeleteFile('D:\WINDOWS\System32\avast!AVSControlService.exe');
 BC_DeleteFile('D:\WINDOWS\System32\avast!AVSControlService.exe');
 DeleteFile('D:\Documents and Settings\LocalService\Application Data\1361538659.exe');
 BC_DeleteFile('D:\Documents and Settings\LocalService\Application Data\1361538659.exe');
 DeleteService('Kwinzy Service');
 DeleteService('avast!AVSControlService');
 BC_DeleteSvc('Kwinzy Service');
 BC_DeleteSvc('avast!AVSControlService');
BC_ImportquarantineList;
BC_Activate;
ExecuteSysClean;
RegKeyIntParamWrite('HKEY_LOCAL_MACHINE', 'SYSTEM\CurrentControlSet\Control\Terminal Server','fAllowToGetHelp', 0);
SetServiceStart('RDSessMgr', 4);
SetServiceStart('SSDPSRV', 4);
executerepair(6);
executerepair(10);
executerepair(11);
executerepair(17);
RebootWindows(true);
end.

После перезагрузки, каркнтин AVZ загрузите по ссылке http://virusinfo.info/upload_virus.php?tid=47176 , как написано в прил.3 правил, сделайте лог Hijackthis и повторите логи AVZ.

[CyberHelper]

Статистика проведенного лечения:

• Получено карантинов: 1
• Обработано файлов: 1
• В ходе лечения вредоносные программы в карантинах не обнаружены