Removal of infected files

[rpearson41]

Hello,
I have already done the system analysis. Saved the zip file. Your help would be very much appreciated.

Вложение 249739

The above is the saved zip file.

[olejah]

Hello.

Close/unload all the programs

Switch off:
- Antivirus and, if you have - Firewall.

- Execute following script in Manual Healing

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\Users\NEWUSE~1\AppData\Local\Temp\Tgx.exe','');
 QuarantineFile('C:\Windows\system32\csrcs.exe','');
 DeleteFile('C:\Windows\system32\csrcs.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','csrcs');
 DeleteFile('C:\Users\NEWUSE~1\AppData\Local\Temp\Tgx.exe');
 DeleteFile('C:\Windows\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

After reboot:
- Execute following script in Manual Healing

begin
CreateQurantineArchive('C:\quarantine.zip');    
end.

- Upload the C:\quarantine.zip here: upload_virus_eng.
- Make a new log file and Attach a new log to your new post..