XP-F3911DE6.EXE Virus

[faraz]

Automatically Open websites. XP-F3911DE6.EXE virus detected by Kaspersky

[AndreyKa]

Please, disable System Restore (see Appendix 1 of rules).
Close all programs.
Execute the script:

begin
SetAVZGuardStatus(True);
 SetAVZPMStatus(True);
 QuarantineFile('C:\Program Files\Jcore\Jcore2.dll','');
 QuarantineFile('c:\windows\system32\xp-f3911de6.exe','');
 DeleteFile('c:\windows\system32\xp-f3911de6.exe');
 DeleteFileMask('C:\DOCUME~1\Faraz\LOCALS~1\Temp\E_4', '*.*', true);
 DeleteFile('C:\WINDOWS\system32\XP-F3911DE6.EXE');
 CreateQurantineArchive('C:\quarantine.zip');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);

The computer will reboot.

Upload file C:\quarantine.zip, by link Upload quarantined files in top of this thread.
Do "Collect system information" and attach new avptool_syscheck.zip to the thread.