Quarantine was recieved. File D:\WINNT\winstart.bat consist of two commands:
Код:
if not exist D:\WINNT\INF\TTIUN.INF deltree /y D:\WINNT\TTIUN206.EXE
del D:\WINNT\WINSTART.BAT
Do you know what TTIUN206.EXE is? If no, please run AVZ, go to File - Custom scripts, copy the Code, paste it to Custom scripts window and Run the script.
Код:
begin
QuarantineFile('D:\WINNT\INF\TTIUN.INF','');
QuarantineFile('D:\WINNT\INF\TTIUN206.EXE','');
end.
After that please upload quarantined files according to the Rules.