неизвесный вирус

[rewq111]

знаю много вирусов но такой впервые..открываю папку с картинками,или что либо другое что содержит картинки и компьютер зависает..и ничего нельзя сделать..и постоянные ошибки которые вылазиют просто так..даже когда ничего не делаю..помогите..

[PavelA]

Лог Хиджака сделайте.
Выполнить скрипт:

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('rdpclipC:\WINDOWS\system32\bndmss.exeC:\WINDOWS\Temp\793.exeC:\WINDOWS\Temp\815.exeC:\WINDOWS\Temp\156.exeC:\WINDOWS\Temp\465.exeC:\WINDOWS\Temp\061.exeC:\WINDOWS\Temp\817.exeC:\WINDOWS\Temp\737.exeC:\WINDOWS\Temp\669.exeC:\WINDOWS\Temp\466.exeC:\WINDOWS\Temp\623.exeC:\WINDOWS\Temp\955.exeC:\WINDOWS\Temp\462.exeC:\WINDOWS\Temp\823.exeC:\WINDOWS\Temp\044.exeC:\WINDOWS\Temp\585.exeC:\WINDOWS\Temp\850.exeC:\WINDOWS\Temp\914.exeC:\WINDOWS\Temp\224.exeC:\WINDOWS\Temp\958.exeC:\WINDOWS\Temp\634.exeC:\WINDOWS\Temp\818.exeC:\WINDOWS\Temp\410.exeC:\WINDOWS\Temp\133.exeC:\WINDOWS\Temp\434.exeC:\WINDOWS\Temp\158.exeC:\WINDOWS\Temp\870.exeC:\WINDOWS\Temp\536.exeC:\WINDOWS\Temp\308.exeC:\WINDOWS\Temp\387.exe','');
 QuarantineFile('C:\WINDOWS\system32\bndmss.exe,C:\WINDOWS\Temp\793.exe,C:\WINDOWS\Temp\815.exe,C:\WINDOWS\Temp\156.exe,C:\WINDOWS\Temp\465.exe,C:\WINDOWS\Temp\061.exe,C:\WINDOWS\Temp\817.exe,C:\WINDOWS\Temp\737.exe,C:\WINDOWS\Temp\669.exe,C:\WINDOWS\Temp\466.exe,C:\WINDOWS\Temp\623.exe,C:\WINDOWS\Temp\955.exe,C:\WINDOWS\Temp\462.exe,C:\WINDOWS\Temp\823.exe,C:\WINDOWS\Temp\044.exe,C:\WINDOWS\Temp\585.exe,C:\WINDOWS\Temp\850.exe,C:\WINDOWS\Temp\914.exe,C:\WINDOWS\Temp\224.exe,C:\WINDOWS\Temp\958.exe,C:\WINDOWS\Temp\634.exe,C:\WINDOWS\Temp\818.exe,C:\WINDOWS\Temp\410.exe,C:\WINDOWS\Temp\133.exe,C:\WINDOWS\Temp\434.exe,C:\WINDOWS\Temp\158.exe,C:\WINDOWS\Temp\870.exe,C:\WINDOWS\Temp\536.exe,C:\WINDOWS\Temp\308.exe,C:\WINDOWS\Temp\387.exe','');
 QuarantineFile('C:\WINDOWS\system32\amvo.exe','');
 QuarantineFile('C:\WINDOWS\system32\.exe','');
 QuarantineFile('C:\WINDOWS\Temp\958.exe','');
 QuarantineFile('C:\WINDOWS\Temp\955.exe','');
 QuarantineFile('C:\WINDOWS\Temp\870.exe','');
 QuarantineFile('C:\WINDOWS\Temp\850.exe','');
 QuarantineFile('C:\WINDOWS\Temp\823.exe','');
 QuarantineFile('C:\WINDOWS\Temp\818.exe','');
 QuarantineFile('C:\WINDOWS\Temp\817.exe','');
 QuarantineFile('C:\WINDOWS\Temp\815.exe','');
 QuarantineFile('C:\WINDOWS\Temp\793.exe','');
 QuarantineFile('C:\WINDOWS\Temp\737.exe','');
 QuarantineFile('C:\WINDOWS\Temp\669.exe','');
 QuarantineFile('C:\WINDOWS\Temp\623.exe','');
 QuarantineFile('C:\WINDOWS\Temp\634.exe','');
 QuarantineFile('C:\WINDOWS\Temp\592.exe','');
 QuarantineFile('C:\WINDOWS\Temp\585.exe','');
 QuarantineFile('C:\WINDOWS\Temp\466.exe','');
 QuarantineFile('C:\WINDOWS\Temp\462.exe','');
 QuarantineFile('C:\WINDOWS\Temp\465.exe','');
 QuarantineFile('C:\WINDOWS\Temp\410.exe','');
 QuarantineFile('C:\WINDOWS\Temp\434.exe','');
 QuarantineFile('C:\WINDOWS\Temp\387.exe','');
 QuarantineFile('C:\WINDOWS\Temp\308.exe','');
 QuarantineFile('C:\WINDOWS\Temp\224.exe','');
 QuarantineFile('C:\WINDOWS\Temp\158.exe','');
 QuarantineFile('C:\WINDOWS\Temp\156.exe','');
 QuarantineFile('C:\WINDOWS\Temp\133.exe','');
 QuarantineFile('C:\WINDOWS\Temp\061.exe','');
 QuarantineFile('C:\WINDOWS\Temp\044.exe','');
 QuarantineFile('C:\RECYCLER\S-1-5-21-6115083059-7951810336-231755444-0972\winmap.exe,C:\RECYCLER\S-1-5-21-0571087324-4103456607-297912274-9485\winmap.exe,C:\RECYCLER\S-1-5-21-2279566542-6910734720-195087359-6333\winmap.exe,C:\RECYCLER\S-1-5-21-6768171445-5056269101-208826423-7689\winmap.exe,C:\RECYCLER\S-1-5-21-5246212396-6255374474-440637458-3861\wingn.exe,explorer.exe','');
 QuarantineFile('C:\RECYCLER\S-1-5-21-0571087324-4103456607-297912274-9485\winmap.exe','');
 QuarantineFile('C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1859\vsofat.exe','');
 QuarantineFile('C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811\vsbntlo.exe','');
 QuarantineFile('C:\RECYCLER\S-1-5-21-0243636035-3055115376-381863306-1556\pqlmq.exe','');
 QuarantineFile('C:\RECYCLER\S-1-5-21-0243336031-4052116379-881863308-0851\vse432.exe','');
 QuarantineFile('C:\WINDOWS\Temp\gel90xne.sys','');
 DeleteService('aic32p');
 QuarantineFile('C:\WINDOWS\system32\drivers\phjmhn.sys','');
 TerminateProcessByName('c:\recycler\s-1-5-21-0243936033-3052116371-381863308-1859\vsofat.exe');
 QuarantineFile('c:\recycler\s-1-5-21-0243936033-3052116371-381863308-1859\vsofat.exe','');
 TerminateProcessByName('c:\recycler\s-1-5-21-0243336031-4052116379-881863308-0851\vse432.exe');
 QuarantineFile('c:\recycler\s-1-5-21-0243336031-4052116379-881863308-0851\vse432.exe','');
DelCLSID('28ABC5C0-4FCB-11CF-AAX5-81CX1C635612');
 QuarantineFile('C:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\sndmgr.exe','');
 DeleteFile('D:\oufddh.exe');
 DeleteFile('D:\autorun.inf');
 DeleteFile('C:\oufddh.exe');
 DeleteFile('C:\autorun.inf');
 DeleteFile('C:\Program Files\PROWiSe\PROWiSe.exe');
 DeleteFile('C:\WINDOWS\system32\amvo1.dll');
 DeleteFile('C:\WINDOWS\system32\amvo0.dll');
 DeleteFile('C:\WINDOWS\system32\amvo.exe');
 DeleteFile('C:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\sndmgr.exe');

 DeleteFile('c:\recycler\s-1-5-21-0243336031-4052116379-881863308-0851\vse432.exe');
 DeleteFile('c:\recycler\s-1-5-21-0243936033-3052116371-381863308-1859\vsofat.exe');
 DeleteFile('C:\WINDOWS\system32\drivers\phjmhn.sys');
 DeleteFile('C:\RECYCLER\S-1-5-21-0243336031-4052116379-881863308-0851\vse432.exe');
 DeleteFile('C:\RECYCLER\S-1-5-21-0243636035-3055115376-381863306-1556\pqlmq.exe');
 DeleteFile('C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1811\vsbntlo.exe');
 DeleteFile('C:\RECYCLER\S-1-5-21-0243936033-3052116371-381863308-1859\vsofat.exe');
 DeleteFile('C:\RECYCLER\S-1-5-21-0571087324-4103456607-297912274-9485\winmap.exe');
 DeleteFile('C:\RECYCLER\S-1-5-21-6115083059-7951810336-231755444-0972\winmap.exe,C:\RECYCLER\S-1-5-21-0571087324-4103456607-297912274-9485\winmap.exe,C:\RECYCLER\S-1-5-21-2279566542-6910734720-195087359-6333\winmap.exe,C:\RECYCLER\S-1-5-21-6768171445-5056269101-208826423-7689\winmap.exe,C:\RECYCLER\S-1-5-21-5246212396-6255374474-440637458-3861\wingn.exe,explorer.exe');
 DeleteFile('C:\WINDOWS\Temp\044.exe');
 DeleteFile('C:\WINDOWS\Temp\061.exe');
 DeleteFile('C:\WINDOWS\Temp\133.exe');
 DeleteFile('C:\WINDOWS\Temp\156.exe');
 DeleteFile('C:\WINDOWS\Temp\158.exe');
 DeleteFile('C:\WINDOWS\Temp\224.exe');
 DeleteFile('C:\WINDOWS\Temp\308.exe');
 DeleteFile('C:\WINDOWS\Temp\387.exe');
 DeleteFile('C:\WINDOWS\Temp\434.exe');
 DeleteFile('C:\WINDOWS\Temp\410.exe');
 DeleteFile('C:\WINDOWS\Temp\465.exe');
 DeleteFile('C:\WINDOWS\Temp\462.exe');
 DeleteFile('C:\WINDOWS\Temp\466.exe');
 DeleteFile('C:\WINDOWS\Temp\585.exe');
 DeleteFile('C:\WINDOWS\Temp\592.exe');
 DeleteFile('C:\WINDOWS\Temp\634.exe');
 DeleteFile('C:\WINDOWS\Temp\623.exe');
 DeleteFile('C:\WINDOWS\Temp\669.exe');
 DeleteFile('C:\WINDOWS\Temp\737.exe');
 DeleteFile('C:\WINDOWS\Temp\793.exe');
 DeleteFile('C:\WINDOWS\Temp\815.exe');
 DeleteFile('C:\WINDOWS\Temp\817.exe');
 DeleteFile('C:\WINDOWS\Temp\818.exe');
 DeleteFile('C:\WINDOWS\Temp\823.exe');
 DeleteFile('C:\WINDOWS\Temp\850.exe');
 DeleteFile('C:\WINDOWS\Temp\870.exe');
 DeleteFile('C:\WINDOWS\Temp\955.exe');
 DeleteFile('C:\WINDOWS\Temp\958.exe');
 DeleteFile('C:\WINDOWS\system32\.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

Загрузить карантин по Правилам.
Сделать заново логи после перезагрузки.