Здравствуйте, в принципе все симптомы указаны в заголовке темы. Антивирус eset nod 32.
Здравствуйте, в принципе все симптомы указаны в заголовке темы. Антивирус eset nod 32.
оставьте один антивирус
- Выполните скрипт в AVZ
После перезагрузки:Код:begin SearchRootkit(true, true); SetAVZGuardStatus(True); QuarantineFile('C:\Documents and Settings\Admin\Application Data\SmartFile\smartfiletray.exe',''); QuarantineFile('C:\WINDOWS\system32\drivers\fmsnvvjd.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\fnkgzezn.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\foqrjacg.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\fplqtecf.sys',''); DeleteService('fpvqozhg'); DeleteService('fppivspk'); DeleteService('fplqtecf'); DeleteService('foqrjacg'); DeleteService('fnkgzezn'); DeleteService('fmsnvvjd'); DeleteService('flceqbcz'); DeleteService('fkmcydxv'); DeleteService('fkknwqhi'); DeleteService('fjbezzeb'); DeleteService('fhsixuwd'); DeleteService('ffxkpdsv'); DeleteService('fdtphvcg'); QuarantineFile('C:\WINDOWS\system32\drivers\fdlkpybk.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\fdhcxnda.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\fcnmqves.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\fccupvuj.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\fbxytsbi.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\fbwupaqg.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ezsqmoog.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ezhprnef.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ezhavgfa.sys',''); DeleteService('fdlkpybk'); DeleteService('fdhcxnda'); DeleteService('fcnmqves'); DeleteService('fccupvuj'); DeleteService('fbywncvr'); DeleteService('fbxytsbi'); DeleteService('fbwupaqg'); DeleteService('ezhprnef'); DeleteService('ezhavgfa'); DeleteService('ezaxzvmf'); DeleteService('ezapkpfh'); DeleteService('ewmdzxtf'); DeleteService('ewhmzaeg'); DeleteService('ewfnifhg'); DeleteService('ewdheblv'); DeleteService('evbsqbiv'); DeleteService('eshieykg'); DeleteService('ejnmizdi'); DeleteService('ejocrjep'); DeleteService('ejzcyrfa'); DeleteService('ekbtignk'); DeleteService('ekiaxzxr'); DeleteService('emfvccpp'); DeleteService('emlgewlw'); DeleteService('emnmltua'); DeleteService('emtnujem'); DeleteService('enqbseps'); DeleteService('enqiktgd'); DeleteService('enyjdgsw'); DeleteService('eoukkehf'); DeleteService('eqpvzknq'); DeleteService('eqxkdeeb'); DeleteService('erfrsizt'); DeleteService('erjkszxl'); DeleteService('erutfbhp'); QuarantineFile('C:\WINDOWS\system32\drivers\erjkszxl.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\erfrsizt.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\emnmltua.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\emlgewlw.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\emfvccpp.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ekiaxzxr.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ekbtignk.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\dysakqzx.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\dyyoieyq.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ebntejtt.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ebvprhrh.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ebvxtnvm.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ebyuhgee.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ecxgolqe.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\eegphxnb.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\eejdgwfc.sys',''); DeleteService('ejgzaokb'); DeleteService('ejgsqssh'); DeleteService('ehmllfoy'); DeleteService('egujcqcq'); DeleteService('egogsgvx'); DeleteService('eejdgwfc'); DeleteService('eegphxnb'); DeleteService('ecxgolqe'); DeleteService('ebyuhgee'); DeleteService('ebxnfgnk'); DeleteService('ebvxtnvm'); DeleteService('ebvprhrh'); DeleteService('ebntejtt'); DeleteService('eainhqbi'); DeleteService('dzvpmote'); DeleteService('dzavnncs'); QuarantineFile('C:\WINDOWS\system32\drivers\dssayjkf.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\dtragnfm.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\durfzyij.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\dusehizo.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\dvsbrwxi.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\dwudulee.sys',''); DeleteService('dyyoieyq'); DeleteService('dysakqzx'); DeleteService('dynvalaa'); DeleteService('dyjkgymd'); DeleteService('dwudulee'); DeleteService('dvsbrwxi'); DeleteService('dusehizo'); DeleteService('durfzyij'); DeleteService('dtragnfm'); DeleteService('dssayjkf'); DeleteService('drrvjuxv'); DeleteService('dqcgpffc'); DeleteService('dqcffdmm'); QuarantineFile('C:\WINDOWS\system32\drivers\dpoxjogb.sys',''); DeleteService('dpoxjogb'); DeleteService('dofwxopx'); DeleteService('doftqnwi'); DeleteService('dnxfhovu'); DeleteService('dnilkwyw'); DeleteService('dmrelsqk'); DeleteService('dmgzkuss'); DeleteService('dlzzjefq'); DeleteService('dlzxmlwr'); DeleteService('dlrssngs'); DeleteService('dkvozswa'); DeleteService('dkiwzprq'); DeleteService('djwsvmjl'); DeleteService('djvhszbv'); DeleteService('djvfqwvu'); QuarantineFile('C:\WINDOWS\system32\drivers\dixipzfi.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\diqqxzto.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\dighhrmm.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\dhhtlput.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\dehjxlrq.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ddykfddd.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\dbrrczrq.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\dapvmhhn.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\czcjqgfv.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\czbmyrrs.sys',''); DeleteService('dixipzfi'); DeleteService('diqqxzto'); DeleteService('dighhrmm'); DeleteService('dhhtlput'); DeleteService('dehjxlrq'); DeleteService('ddykfddd'); DeleteService('dbrrczrq'); DeleteService('dbcgjspt'); DeleteService('dapvmhhn'); DeleteService('dabhsrqi'); DeleteService('czcjqgfv'); DeleteService('czbmyrrs'); DeleteService('cxxoktof'); DeleteService('cxhrrqay'); DeleteService('cwkcuxst'); DeleteService('cwfwjvhk'); DeleteService('cvoajdfl'); DeleteService('cufydwor'); QuarantineFile('C:\WINDOWS\system32\drivers\ctcmmmbh.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ctkbtvuh.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cudqekgq.sys',''); DeleteService('cudqekgq'); DeleteService('ctkbtvuh'); DeleteService('ctcmmmbh'); QuarantineFile('C:\WINDOWS\system32\drivers\cpxtkiho.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cqhwlxku.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\crywebhd.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\csdrmscc.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\csjdntdg.sys',''); DeleteService('csjdntdg'); DeleteService('csdrmscc'); DeleteService('crywebhd'); DeleteService('cqhwlxku'); DeleteService('cpxtkiho'); DeleteService('cmkcjfuc'); DeleteService('cmnbloim'); DeleteService('cmwjeulr'); DeleteService('cmwlupzq'); DeleteService('cohrrtxn'); DeleteService('cotgxbiw'); DeleteService('cowiktqq'); QuarantineFile('C:\WINDOWS\system32\drivers\cowiktqq.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cotgxbiw.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cohrrtxn.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cmwlupzq.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cmwjeulr.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cmnbloim.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cmkcjfuc.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\clgsdczx.sys',''); DeleteService('clgsdczx'); DeleteService('chbdcjlt'); DeleteService('chiivddu'); DeleteService('chspphzn'); DeleteService('ciqstohv'); DeleteService('cjbimtkp'); QuarantineFile('C:\WINDOWS\system32\drivers\cjbimtkp.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ciqstohv.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\chbdcjlt.sys',''); DeleteService('cdfhybcg'); DeleteService('cdodmdil'); DeleteService('cdxfpqaf'); DeleteService('cdztctmv'); DeleteService('cegezwpj'); DeleteService('cempinhc'); DeleteService('cghncebe'); DeleteService('cghurfsk'); QuarantineFile('C:\WINDOWS\system32\drivers\cghurfsk.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cghncebe.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cempinhc.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cegezwpj.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cdxfpqaf.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cdodmdil.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cdfhybcg.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cbzrrxbv.sys',''); DeleteService('cbzrrxbv'); QuarantineFile('C:\WINDOWS\system32\drivers\cavoxofc.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cbrpmhxo.sys',''); DeleteService('cbsoztdm'); DeleteService('cavoxofc'); QuarantineFile('C:\WINDOWS\system32\drivers\bummzgyl.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\breeksbm.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bqspvyay.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bpdrveah.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bmmdwplm.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bmlyxwiv.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bsgstrmg.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bsixwjqq.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bstkxoim.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\btizwxij.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bvakrgts.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bxhtpqer.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\byaplzrk.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\byhftegz.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bzmbjpuf.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bzxpxuhy.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\cagkgzbu.sys',''); DeleteService('cagkgzbu'); DeleteService('bzxpxuhy'); DeleteService('bzmbjpuf'); DeleteService('byhftegz'); DeleteService('byaplzrk'); DeleteService('bxhtpqer'); DeleteService('bvakrgts'); DeleteService('bummzgyl'); DeleteService('btizwxij'); DeleteService('bstkxoim'); DeleteService('bsixwjqq'); DeleteService('bsgstrmg'); DeleteService('breeksbm'); DeleteService('bqspvyay'); DeleteService('bpdrveah'); QuarantineFile('C:\WINDOWS\system32\drivers\baccrgsn.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bcxaowux.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bdejdyrr.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bdgyaqsq.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bfdpkdej.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bgrsdsth.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bhdsmfjg.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bheexxwo.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\biyqrrru.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bkbtfwty.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bkpprazn.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\blubhttd.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\blwtthoc.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bmhfotkm.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bmjeaiaj.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bozsmfil.sys',''); DeleteService('bozsmfil'); DeleteService('bmmdwplm'); DeleteService('bmlyxwiv'); DeleteService('bmhfotkm'); DeleteService('blwtthoc'); DeleteService('blubhttd'); DeleteService('bkpprazn'); DeleteService('bkbtfwty'); DeleteService('biyqrrru'); DeleteService('bheexxwo'); DeleteService('bhdsmfjg'); DeleteService('bgrsdsth'); DeleteService('bfdpkdej'); DeleteService('bdgyaqsq'); DeleteService('bdejdyrr'); QuarantineFile('C:\WINDOWS\system32\drivers\axfqszoi.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\axketkqa.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ayfduvzq.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ayhgwulv.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\azbsndrm.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\azrhicty.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\bcezecpk.sys',''); DeleteService('bcxaowux'); DeleteService('bcezecpk'); DeleteService('baccrgsn'); DeleteService('azsvbjzg'); DeleteService('azrhicty'); DeleteService('azbsndrm'); DeleteService('ayfduvzq'); DeleteService('axketkqa'); DeleteService('axfqszoi'); DeleteService('awvkrprr'); DeleteService('awhrtyts'); DeleteService('awgrfugt'); DeleteService('avowlcyj'); DeleteService('avizphth'); DeleteService('auiqejqs'); DeleteService('atmbtdfc'); DeleteService('aruicqkv'); DeleteService('armdxyde'); DeleteService('arihjgeu'); DeleteService('aqznarie'); DeleteService('aqvrswey'); DeleteService('aqspnlay'); DeleteService('aqoegheg'); DeleteService('appxdkbl'); DeleteService('apffjqee'); QuarantineFile('C:\WINDOWS\system32\drivers\aruicqkv.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\armdxyde.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\arhwlmwp.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\aqznarie.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\aqvrswey.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\aqspnlay.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\aqoegheg.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\appxdkbl.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\apkqjxif.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\aphniaje.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\apffjqee.sys',''); DeleteService('almdccea'); QuarantineFile('C:\WINDOWS\system32\drivers\almdccea.sys',''); DeleteService('ainkvibl'); DeleteService('ajfvvukg'); DeleteService('ajiytalp'); DeleteService('akeomioa'); QuarantineFile('C:\WINDOWS\system32\drivers\akeomioa.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ajiytalp.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ajfvvukg.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\ainkvibl.sys',''); DeleteService('ahfmxqqs'); QuarantineFile('C:\WINDOWS\system32\drivers\ahfmxqqs.sys',''); DeleteService('adsnrdkr'); DeleteService('aevntvpq'); DeleteService('afeucikk'); DeleteService('afqiakbz'); DeleteService('afyvwwgu'); DeleteService('agievndw'); QuarantineFile('C:\WINDOWS\system32\drivers\agievndw.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\afyvwwgu.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\afqiakbz.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\afeucikk.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\aevntvpq.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\adsnrdkr.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\adnwrcob.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\acarwjnj.sys',''); DeleteService('adnwrcob'); DeleteService('acarwjnj'); QuarantineFile('C:\WINDOWS\system32\drivers\aafveyun.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\aajehohe.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\aaqhaiem.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\abcyaolj.sys',''); QuarantineFile('C:\WINDOWS\system32\drivers\abdbnfrp.sys',''); DeleteService('abdbnfrp'); DeleteService('abcyaolj'); DeleteService('aaqhaiem'); DeleteService('aajehohe'); DeleteService('aafveyun'); DeleteFile('C:\WINDOWS\system32\drivers\abdbnfrp.sys'); DeleteFile('C:\WINDOWS\system32\drivers\abcyaolj.sys'); DeleteFile('C:\WINDOWS\system32\drivers\aaqhaiem.sys'); DeleteFile('C:\WINDOWS\system32\drivers\aajehohe.sys'); DeleteFile('C:\WINDOWS\system32\drivers\aafveyun.sys'); DeleteFile('C:\WINDOWS\system32\drivers\acarwjnj.sys'); DeleteFile('C:\WINDOWS\system32\drivers\adnwrcob.sys'); DeleteFile('C:\WINDOWS\system32\drivers\adsnrdkr.sys'); DeleteFile('C:\WINDOWS\system32\drivers\aevntvpq.sys'); DeleteFile('C:\WINDOWS\system32\drivers\afeucikk.sys'); DeleteFile('C:\WINDOWS\system32\drivers\afqiakbz.sys'); DeleteFile('C:\WINDOWS\system32\drivers\afyvwwgu.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ahfmxqqs.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ainkvibl.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ajfvvukg.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ajiytalp.sys'); DeleteFile('C:\WINDOWS\system32\drivers\akeomioa.sys'); DeleteFile('C:\WINDOWS\system32\drivers\almdccea.sys'); DeleteFile('C:\WINDOWS\system32\drivers\apffjqee.sys'); DeleteFile('C:\WINDOWS\system32\drivers\aphniaje.sys'); DeleteFile('C:\WINDOWS\system32\drivers\apkqjxif.sys'); DeleteFile('C:\WINDOWS\system32\drivers\appxdkbl.sys'); DeleteFile('C:\WINDOWS\system32\drivers\aqoegheg.sys'); DeleteFile('C:\WINDOWS\system32\drivers\aqspnlay.sys'); DeleteFile('C:\WINDOWS\system32\drivers\aqvrswey.sys'); DeleteFile('C:\WINDOWS\system32\drivers\aqznarie.sys'); DeleteFile('C:\WINDOWS\system32\drivers\arhwlmwp.sys'); DeleteFile('C:\WINDOWS\system32\drivers\arihjgeu.sys'); DeleteFile('C:\WINDOWS\system32\drivers\armdxyde.sys'); DeleteFile('C:\WINDOWS\system32\drivers\aruicqkv.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bcxaowux.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bcezecpk.sys'); DeleteFile('C:\WINDOWS\system32\drivers\baccrgsn.sys'); DeleteFile('C:\WINDOWS\system32\drivers\azsvbjzg.sys'); DeleteFile('C:\WINDOWS\system32\drivers\azrhicty.sys'); DeleteFile('C:\WINDOWS\system32\drivers\azbsndrm.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ayhgwulv.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ayfduvzq.sys'); DeleteFile('C:\WINDOWS\system32\drivers\axketkqa.sys'); DeleteFile('C:\WINDOWS\system32\drivers\axfqszoi.sys'); DeleteFile('C:\WINDOWS\system32\drivers\awvkrprr.sys'); DeleteFile('C:\WINDOWS\system32\drivers\awhrtyts.sys'); DeleteFile('C:\WINDOWS\system32\drivers\awgrfugt.sys'); DeleteFile('C:\WINDOWS\system32\drivers\avowlcyj.sys'); DeleteFile('C:\WINDOWS\system32\drivers\avizphth.sys'); DeleteFile('C:\WINDOWS\system32\drivers\auiqejqs.sys'); DeleteFile('C:\WINDOWS\system32\drivers\atmbtdfc.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bdejdyrr.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bozsmfil.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bmmdwplm.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bmlyxwiv.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bmhfotkm.sys'); DeleteFile('C:\WINDOWS\system32\drivers\blwtthoc.sys'); DeleteFile('C:\WINDOWS\system32\drivers\blubhttd.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bkpprazn.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bkbtfwty.sys'); DeleteFile('C:\WINDOWS\system32\drivers\biyqrrru.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bheexxwo.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bhdsmfjg.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bgrsdsth.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bfdpkdej.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bdgyaqsq.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cagkgzbu.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bzxpxuhy.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bzmbjpuf.sys'); DeleteFile('C:\WINDOWS\system32\drivers\byhftegz.sys'); DeleteFile('C:\WINDOWS\system32\drivers\byaplzrk.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bxhtpqer.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bvakrgts.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bummzgyl.sys'); DeleteFile('C:\WINDOWS\system32\drivers\btizwxij.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bstkxoim.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bsixwjqq.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bsgstrmg.sys'); DeleteFile('C:\WINDOWS\system32\drivers\breeksbm.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bqspvyay.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bpdrveah.sys'); DeleteFile('C:\WINDOWS\system32\drivers\bmjeaiaj.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cbsoztdm.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cbrpmhxo.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cavoxofc.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cbzrrxbv.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cdfhybcg.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cdodmdil.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cdxfpqaf.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cdztctmv.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cegezwpj.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cempinhc.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cghncebe.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cghurfsk.sys'); DeleteFile('C:\WINDOWS\system32\drivers\chbdcjlt.sys'); DeleteFile('C:\WINDOWS\system32\drivers\chiivddu.sys'); DeleteFile('C:\WINDOWS\system32\drivers\chspphzn.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ciqstohv.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cjbimtkp.sys'); DeleteFile('C:\WINDOWS\system32\drivers\clgsdczx.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cmkcjfuc.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cmnbloim.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cmwjeulr.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cmwlupzq.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cohrrtxn.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cotgxbiw.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cowiktqq.sys'); DeleteFile('C:\WINDOWS\system32\drivers\csjdntdg.sys'); DeleteFile('C:\WINDOWS\system32\drivers\csdrmscc.sys'); DeleteFile('C:\WINDOWS\system32\drivers\crywebhd.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cqhwlxku.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cpxtkiho.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cudqekgq.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ctkbtvuh.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cufydwor.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cvoajdfl.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cwfwjvhk.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cwkcuxst.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cxhrrqay.sys'); DeleteFile('C:\WINDOWS\system32\drivers\cxxoktof.sys'); DeleteFile('C:\WINDOWS\system32\drivers\czbmyrrs.sys'); DeleteFile('C:\WINDOWS\system32\drivers\czcjqgfv.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dabhsrqi.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dapvmhhn.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dbcgjspt.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dbrrczrq.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ddykfddd.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dehjxlrq.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dhhtlput.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dighhrmm.sys'); DeleteFile('C:\WINDOWS\system32\drivers\diqqxzto.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dixipzfi.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dpoxjogb.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dofwxopx.sys'); DeleteFile('C:\WINDOWS\system32\drivers\doftqnwi.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dnxfhovu.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dnilkwyw.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dmrelsqk.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dmgzkuss.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dlzzjefq.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dlzxmlwr.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dlrssngs.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dkvozswa.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dkiwzprq.sys'); DeleteFile('C:\WINDOWS\system32\drivers\djwsvmjl.sys'); DeleteFile('C:\WINDOWS\system32\drivers\djvhszbv.sys'); DeleteFile('C:\WINDOWS\system32\drivers\djvfqwvu.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dpyqhcyq.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dqcffdmm.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dyyoieyq.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dysakqzx.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dynvalaa.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dyjkgymd.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dwudulee.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dvsbrwxi.sys'); DeleteFile('C:\WINDOWS\system32\drivers\durfzyij.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dssayjkf.sys'); DeleteFile('C:\WINDOWS\system32\drivers\drrvjuxv.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dqcgpffc.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dzavnncs.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ejgzaokb.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ejgsqssh.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ehmllfoy.sys'); DeleteFile('C:\WINDOWS\system32\drivers\egujcqcq.sys'); DeleteFile('C:\WINDOWS\system32\drivers\egogsgvx.sys'); DeleteFile('C:\WINDOWS\system32\drivers\eejdgwfc.sys'); DeleteFile('C:\WINDOWS\system32\drivers\eegphxnb.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ecxgolqe.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ebyuhgee.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ebxnfgnk.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ebvxtnvm.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ebvprhrh.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ebntejtt.sys'); DeleteFile('C:\WINDOWS\system32\drivers\eainhqbi.sys'); DeleteFile('C:\WINDOWS\system32\drivers\dzvpmote.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ejnmizdi.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ejocrjep.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ejzcyrfa.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ekbtignk.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ekiaxzxr.sys'); DeleteFile('C:\WINDOWS\system32\drivers\emfvccpp.sys'); DeleteFile('C:\WINDOWS\system32\drivers\emlgewlw.sys'); DeleteFile('C:\WINDOWS\system32\drivers\emnmltua.sys'); DeleteFile('C:\WINDOWS\system32\drivers\emtnujem.sys'); DeleteFile('C:\WINDOWS\system32\drivers\enqbseps.sys'); DeleteFile('C:\WINDOWS\system32\drivers\enqiktgd.sys'); DeleteFile('C:\WINDOWS\system32\drivers\enyjdgsw.sys'); DeleteFile('C:\WINDOWS\system32\drivers\eoukkehf.sys'); DeleteFile('C:\WINDOWS\system32\drivers\eqpvzknq.sys'); DeleteFile('C:\WINDOWS\system32\drivers\eqxkdeeb.sys'); DeleteFile('C:\WINDOWS\system32\drivers\erfrsizt.sys'); DeleteFile('C:\WINDOWS\system32\drivers\erjkszxl.sys'); DeleteFile('C:\WINDOWS\system32\drivers\erutfbhp.sys'); DeleteFile('C:\WINDOWS\system32\drivers\eshieykg.sys'); DeleteFile('C:\WINDOWS\system32\drivers\fdlkpybk.sys'); DeleteFile('C:\WINDOWS\system32\drivers\fdhcxnda.sys'); DeleteFile('C:\WINDOWS\system32\drivers\fcnmqves.sys'); DeleteFile('C:\WINDOWS\system32\drivers\fccupvuj.sys'); DeleteFile('C:\WINDOWS\system32\drivers\fbywncvr.sys'); DeleteFile('C:\WINDOWS\system32\drivers\fbxytsbi.sys'); DeleteFile('C:\WINDOWS\system32\drivers\fbwupaqg.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ezsqmoog.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ezhprnef.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ezhavgfa.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ezaxzvmf.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ezapkpfh.sys'); DeleteFile('C:\WINDOWS\system32\drivers\eywosula.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ewmdzxtf.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ewhmzaeg.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ewfnifhg.sys'); DeleteFile('C:\WINDOWS\system32\drivers\ewdheblv.sys'); DeleteFile('C:\WINDOWS\system32\drivers\evbsqbiv.sys'); DeleteFile('C:\WINDOWS\system32\drivers\fpvqozhg.sys'); DeleteFile('C:\WINDOWS\system32\drivers\fppivspk.sys'); DeleteFile('C:\WINDOWS\system32\drivers\fpmmpuca.sys'); DeleteFile('C:\WINDOWS\system32\drivers\fplqtecf.sys'); DeleteFile('C:\WINDOWS\system32\drivers\foqrjacg.sys'); DeleteFile('C:\WINDOWS\system32\drivers\fnkgzezn.sys'); DeleteFile('C:\WINDOWS\system32\drivers\fmsnvvjd.sys'); BC_ImportAll; ExecuteSysClean; BC_Activate; RebootWindows(true); end.
- выполните такой скрипт
- Файл quarantine.zip из папки AVZ загрузите по ссылке Прислать запрошенный карантин вверху темыКод:begin CreateQurantineArchive(GetAVZDirectory+'quarantine.zip'); end.
- Скачайте отсюда архив с новыми базами, распакуйте его
- Сделайте повторные логи по правилам п.1-3 раздела Диагностика.(virusinfo_syscure.zip;virusinfo_syscheck.zip; hijackthis.log)
Уважаемый(ая) evgenrs, наши специалисты оказали Вам всю возможную помощь по вашему обращению.
В целях поддержания безопасности вашего компьютера настоятельно рекомендуем:
Чтобы всегда быть в курсе актуальных угроз в области информационной безопасности и сохранять свой компьютер защищенным, рекомендуем следить за последними новостями ИТ-сферы портала Anti-Malware.ru:
Надеемся больше никогда не увидеть ваш компьютер зараженным!
Если Вас не затруднит, пополните пожалуйста нашу базу безопасных файлов.