Подхватил вирус! Помогите!

Здравствуйте! помогите с проблемой,устанавливаются непонятные программы каждый раз при запуске windows 7 X64.
Cure it'ом удаляется,спустя какое то время появляются непонятно откуда.

Уважаемый(ая) [B]MGSG[/B], спасибо за обращение на наш форум!

Помощь в лечении комьютера на VirusInfo.Info оказывается абсолютно бесплатно. Хелперы в самое ближайшее время ответят на Ваш запрос. Для оказания помощи необходимо предоставить логи сканирования утилитами АВЗ и HiJackThis, подробнее можно прочитать в [URL="http://virusinfo.info/pravila.html"]правилах оформления запроса о помощи[/URL].

Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста [URL="http://virusinfo.info/content.php?r=113-virusinfo.info-donate"]поддержите проект[/URL].

Здравствуйте,

Удалите CinemaP-1.9cV16.03, Crossbrowse, PlusHD-1.2V20.07, SavePass 1.1 через установку программ в панели управления

AVZ [URL=http://virusinfo.info/showthread.php?t=7239&p=88804&viewfull=1#post88804]выполнить следующий скрипт[/URL].
Важно на ОС: Windows Vista/7/8/8.1 AVZ запускайте через контекстное меню проводника от имени Администратора.
[CODE]
begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.'+#13#10+'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
TerminateProcessByName('C:\Users\Zhenya\AppData\Local\биометрическая.exe');
TerminateProcessByName('c:\program files (x86)\03000200-1437756775-0500-0006-000700080009\knsl880c.tmpfs');
TerminateProcessByName('c:\program files (x86)\wordsurfer_1.10.0.19\service\wsasvc.exe');
TerminateProcessByName('c:\temp\nsf9aa1.tmp');
TerminateProcessByName('c:\temp\nsvf2cc.tmp');
StopService('Checker');
StopService('QMUdisk');
StopService('TS888x64');
StopService('WUL19');
StopService('bebtosho');
StopService('comyninu');
StopService('fydujusu');
StopService('hyverumu');
StopService('ipucatyj');
StopService('wsafd_1_10_0_19');
QuarantineFile('C:\Program Files (x86)\SavePass 1.1\67d2d40a-287d-4ff7-b77e-af07772770d4-1-6.exe','');
QuarantineFile('C:\Program Files (x86)\SavePass 1.1\67d2d40a-287d-4ff7-b77e-af07772770d4-1-7.exe','');
QuarantineFile('C:\Program Files (x86)\SavePass 1.1\67d2d40a-287d-4ff7-b77e-af07772770d4-10.exe','');
QuarantineFile('C:\Program Files (x86)\SavePass 1.1\67d2d40a-287d-4ff7-b77e-af07772770d4-3.exe','');
QuarantineFile('C:\Program Files (x86)\SavePass 1.1\67d2d40a-287d-4ff7-b77e-af07772770d4-5.exe','');
QuarantineFile('C:\Program Files (x86)\SavePass 1.1\67d2d40a-287d-4ff7-b77e-af07772770d4-6.exe','');
QuarantineFile('C:\Program Files (x86)\SavePass 1.1\67d2d40a-287d-4ff7-b77e-af07772770d4-7.exe','');
QuarantineFile('C:\Program Files (x86)\Application Assistance\ap.exe','');
QuarantineFile('C:\Program Files (x86)\03000200-1437756775-0500-0006-000700080009\hnsyB4D1.tmp','');
QuarantineFile('C:\Program Files (x86)\03000200-1437756775-0500-0006-000700080009\jnsv9F92.tmp','');
QuarantineFile('C:\Program Files (x86)\03000200-1437756775-0500-0006-000700080009\knsl880C.tmpfs','');
QuarantineFile('C:\Program Files (x86)\CinemaP-1.9cV16.03\e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-6.exe','');
QuarantineFile('C:\Program Files (x86)\CinemaP-1.9cV16.03\e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.exe','');
QuarantineFile('C:\Program Files (x86)\CinemaP-1.9cV16.03\e653cf25-f107-4cbe-b8d1-5dadaea354f2-10.exe','');
QuarantineFile('C:\Program Files (x86)\CinemaP-1.9cV16.03\e653cf25-f107-4cbe-b8d1-5dadaea354f2-3.exe','');
QuarantineFile('C:\Program Files (x86)\CinemaP-1.9cV16.03\e653cf25-f107-4cbe-b8d1-5dadaea354f2-5.exe','');
QuarantineFile('C:\Program Files (x86)\CinemaP-1.9cV16.03\e653cf25-f107-4cbe-b8d1-5dadaea354f2-6.exe','');
QuarantineFile('C:\Program Files (x86)\CinemaP-1.9cV16.03\e653cf25-f107-4cbe-b8d1-5dadaea354f2-7.exe','');
QuarantineFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe','');
QuarantineFile('C:\Program Files (x86)\PlusHD-1.2V20.07\6c64da53-b139-49e8-a37a-ae13b1fb86da-10.exe','');
QuarantineFile('C:\Program Files (x86)\PlusHD-1.2V20.07\6c64da53-b139-49e8-a37a-ae13b1fb86da-3.exe','');
QuarantineFile('C:\Program Files (x86)\PlusHD-1.2V20.07\6c64da53-b139-49e8-a37a-ae13b1fb86da-6.exe','');
QuarantineFile('C:\Program Files (x86)\PlusHD-1.2V20.07\6c64da53-b139-49e8-a37a-ae13b1fb86da-7.exe','');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\QMUdisk64.sys','');
QuarantineFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\TS888x64.sys','');
QuarantineFile('C:\Program Files (x86)\WordSurfer_1.10.0.19\Update\WordSurferAutoUpdateClient.exe','');
QuarantineFile('C:\Program Files (x86)\gmsd_ru_005010040\gmsd_ru_005010040.exe','');
QuarantineFile('C:\Program Files\Checker\check.exe','');
QuarantineFile('C:\ProgramData\DhmReu\socahen.exe','');
QuarantineFile('C:\ProgramData\DhmReu\socdhen.exe','');
QuarantineFile('C:\ProgramData\DhmReu\socwhen.exe','');
QuarantineFileF('C:\ProgramData\WindowsMangerProtect', '*', false,'', 0, 0);
QuarantineFile('C:\TEMP\FB1BA9E2-84889FD5-46F957FB-EF171A4D\5890189f.sys','');
QuarantineFile('C:\TEMP\FB1BA9E2-84889FD5-46F957FB-EF171A4D\KYcurF1NVPH.exe','');
QuarantineFile('C:\Temp\fsd66B7.exe','');
QuarantineFile('C:\Users\Zhenya\AppData\Local\биометрическая.exe','');
QuarantineFile('C:\Users\Zhenya\AppData\Local\SmartWeb\SmartWebHelper.exe','');
QuarantineFile('C:\Users\Zhenya\AppData\Local\SmartWeb\swhk.dll','');
QuarantineFile('C:\Users\Zhenya\AppData\Local\gmsd_ru_005010040\upgmsd_ru_005010040.exe','');
QuarantineFile('C:\Users\Zhenya\AppData\Roaming\BYAIAMUF.exe','');
QuarantineFile('C:\Users\Zhenya\appdata\local\smartweb\__u.exe','');
QuarantineFile('C:\Users\Zhenya\appdata\local\smartweb\smartwebapp.exe','');
QuarantineFile('C:\Users\Zhenya\appdata\local\smartweb\smartwebhelper.exe','');
QuarantineFile('C:\Users\Zhenya\appdata\local\smartweb\swhk.dll','');
QuarantineFile('C:\Users\Zhenya\appdata\roaming\byaiamuf.exe','');
QuarantineFile('C:\Windows\system32\drivers\wsafd_1_10_0_19.sys','');
QuarantineFile('C:\Program Files (x86)\Internet Speed Checker\1862a7f8-fe41-431c-b01f-9874e72592c8-1-6.exe','');
QuarantineFile('C:\Program Files (x86)\Internet Speed Checker\1862a7f8-fe41-431c-b01f-9874e72592c8-1-7.exe','');
QuarantineFile('C:\Program Files (x86)\Internet Speed Checker\1862a7f8-fe41-431c-b01f-9874e72592c8-10.exe','');
QuarantineFile('C:\Program Files (x86)\Internet Speed Checker\1862a7f8-fe41-431c-b01f-9874e72592c8-5.exe','');
QuarantineFile('C:\Program Files (x86)\Internet Speed Checker\1862a7f8-fe41-431c-b01f-9874e72592c8-6.exe','');
QuarantineFile('C:\Program Files (x86)\Internet Speed Checker\1862a7f8-fe41-431c-b01f-9874e72592c8-7.exe','');
QuarantineFile('c:\program files (x86)\03000200-1437756775-0500-0006-000700080009\hnsyb4d1.tmp','');
QuarantineFile('c:\program files (x86)\03000200-1437756775-0500-0006-000700080009\jnsv9f92.tmp','');
QuarantineFile('c:\program files (x86)\gmsd_ru_005010040\gmsd_ru_005010040.exe','');
QuarantineFile('c:\program files (x86)\wordsurfer_1.10.0.19\service\wsasvc.exe','');
QuarantineFile('c:\programdata\dhmreu\socahen.exe','');
QuarantineFile('c:\programdata\dhmreu\socwhen.exe','');
QuarantineFile('c:\temp\nsf9aa1.tmp','');
QuarantineFile('c:\temp\nss6153.tmp','');
QuarantineFile('c:\users\zhenya\appdata\local\gmsd_ru_005010040\upgmsd_ru_005010040.exe','');
QuarantineFile('c:\users\zhenya\appdata\local\smartweb\smartwebapp.exe','');
QuarantineFile('c:\users\zhenya\appdata\local\smartweb\smartwebhelper.exe','');
DeleteFile('C:\Program Files (x86)\SavePass 1.1\67d2d40a-287d-4ff7-b77e-af07772770d4-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\SavePass 1.1\67d2d40a-287d-4ff7-b77e-af07772770d4-1-7.exe','32');
DeleteFile('C:\Program Files (x86)\SavePass 1.1\67d2d40a-287d-4ff7-b77e-af07772770d4-10.exe','32');
DeleteFile('C:\Program Files (x86)\SavePass 1.1\67d2d40a-287d-4ff7-b77e-af07772770d4-3.exe','32');
DeleteFile('C:\Program Files (x86)\SavePass 1.1\67d2d40a-287d-4ff7-b77e-af07772770d4-5.exe','32');
DeleteFile('C:\Program Files (x86)\SavePass 1.1\67d2d40a-287d-4ff7-b77e-af07772770d4-6.exe','32');
DeleteFile('C:\Program Files (x86)\SavePass 1.1\67d2d40a-287d-4ff7-b77e-af07772770d4-7.exe','32');
DeleteFile('C:\Program Files (x86)\Application Assistance\ap.exe','32');
DeleteFile('C:\Program Files (x86)\03000200-1437756775-0500-0006-000700080009\hnsyB4D1.tmp','32');
DeleteFile('C:\Program Files (x86)\03000200-1437756775-0500-0006-000700080009\jnsv9F92.tmp','32');
DeleteFile('C:\Program Files (x86)\03000200-1437756775-0500-0006-000700080009\knsl880C.tmpfs','32');
DeleteFile('C:\Program Files (x86)\CinemaP-1.9cV16.03\e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CinemaP-1.9cV16.03\e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.exe','32');
DeleteFile('C:\Program Files (x86)\CinemaP-1.9cV16.03\e653cf25-f107-4cbe-b8d1-5dadaea354f2-10.exe','32');
DeleteFile('C:\Program Files (x86)\CinemaP-1.9cV16.03\e653cf25-f107-4cbe-b8d1-5dadaea354f2-3.exe','32');
DeleteFile('C:\Program Files (x86)\CinemaP-1.9cV16.03\e653cf25-f107-4cbe-b8d1-5dadaea354f2-5.exe','32');
DeleteFile('C:\Program Files (x86)\CinemaP-1.9cV16.03\e653cf25-f107-4cbe-b8d1-5dadaea354f2-6.exe','32');
DeleteFile('C:\Program Files (x86)\CinemaP-1.9cV16.03\e653cf25-f107-4cbe-b8d1-5dadaea354f2-7.exe','32');
DeleteFile('C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\utility.exe','32');
DeleteFile('C:\Program Files (x86)\PlusHD-1.2V20.07\6c64da53-b139-49e8-a37a-ae13b1fb86da-10.exe','32');
DeleteFile('C:\Program Files (x86)\PlusHD-1.2V20.07\6c64da53-b139-49e8-a37a-ae13b1fb86da-3.exe','32');
DeleteFile('C:\Program Files (x86)\PlusHD-1.2V20.07\6c64da53-b139-49e8-a37a-ae13b1fb86da-6.exe','32');
DeleteFile('C:\Program Files (x86)\PlusHD-1.2V20.07\6c64da53-b139-49e8-a37a-ae13b1fb86da-7.exe','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\QMUdisk64.sys','32');
DeleteFile('C:\Program Files (x86)\Tencent\QQPCMgr\10.11.16588.235\TS888x64.sys','32');
DeleteFile('C:\Program Files (x86)\WordSurfer_1.10.0.19\Update\WordSurferAutoUpdateClient.exe','32');
DeleteFile('C:\Program Files (x86)\gmsd_ru_005010040\gmsd_ru_005010040.exe','32');
DeleteFile('C:\Program Files\Checker\check.exe','32');
DeleteFile('C:\ProgramData\DhmReu\socahen.exe','32');
DeleteFile('C:\ProgramData\DhmReu\socdhen.exe','32');
DeleteFile('C:\ProgramData\DhmReu\socwhen.exe','32');
DeleteFile('C:\Temp\fsd66B7.exe','32');
DeleteFile('C:\Users\Zhenya\AppData\Local\биометрическая.exe','32');
DeleteFile('C:\Users\Zhenya\AppData\Local\SmartWeb\SmartWebHelper.exe','32');
DeleteFile('C:\Users\Zhenya\AppData\Local\SmartWeb\swhk.dll','32');
DeleteFile('C:\Users\Zhenya\AppData\Local\gmsd_ru_005010040\upgmsd_ru_005010040.exe','32');
DeleteFile('C:\Users\Zhenya\AppData\Roaming\BYAIAMUF.exe','32');
DeleteFile('C:\Users\Zhenya\appdata\local\smartweb\__u.exe','32');
DeleteFile('C:\Users\Zhenya\appdata\local\smartweb\smartwebapp.exe','32');
DeleteFile('C:\Users\Zhenya\appdata\local\smartweb\smartwebhelper.exe','32');
DeleteFile('C:\Users\Zhenya\appdata\local\smartweb\swhk.dll','32');
DeleteFile('C:\Users\Zhenya\appdata\roaming\byaiamuf.exe','32');
DeleteFile('C:\Windows\Tasks\1862a7f8-fe41-431c-b01f-9874e72592c8-1-6.job','64');
DeleteFile('C:\Windows\Tasks\1862a7f8-fe41-431c-b01f-9874e72592c8-1-7.job','64');
DeleteFile('C:\Windows\Tasks\1862a7f8-fe41-431c-b01f-9874e72592c8-10_user.job','64');
DeleteFile('C:\Windows\Tasks\1862a7f8-fe41-431c-b01f-9874e72592c8-5.job','64');
DeleteFile('C:\Windows\Tasks\1862a7f8-fe41-431c-b01f-9874e72592c8-5_user.job','64');
DeleteFile('C:\Windows\Tasks\1862a7f8-fe41-431c-b01f-9874e72592c8-6.job','64');
DeleteFile('C:\Windows\Tasks\1862a7f8-fe41-431c-b01f-9874e72592c8-7.job','64');
DeleteFile('C:\Windows\Tasks\67d2d40a-287d-4ff7-b77e-af07772770d4-1-6.job','64');
DeleteFile('C:\Windows\Tasks\67d2d40a-287d-4ff7-b77e-af07772770d4-1-7.job','64');
DeleteFile('C:\Windows\Tasks\67d2d40a-287d-4ff7-b77e-af07772770d4-10_user.job','64');
DeleteFile('C:\Windows\Tasks\67d2d40a-287d-4ff7-b77e-af07772770d4-3.job','64');
DeleteFile('C:\Windows\Tasks\67d2d40a-287d-4ff7-b77e-af07772770d4-5.job','64');
DeleteFile('C:\Windows\Tasks\67d2d40a-287d-4ff7-b77e-af07772770d4-5_user.job','64');
DeleteFile('C:\Windows\Tasks\67d2d40a-287d-4ff7-b77e-af07772770d4-6.job','64');
DeleteFile('C:\Windows\Tasks\67d2d40a-287d-4ff7-b77e-af07772770d4-7.job','64');
DeleteFile('C:\Windows\Tasks\6c64da53-b139-49e8-a37a-ae13b1fb86da-10_user.job','64');
DeleteFile('C:\Windows\Tasks\6c64da53-b139-49e8-a37a-ae13b1fb86da-3.job','64');
DeleteFile('C:\Windows\Tasks\6c64da53-b139-49e8-a37a-ae13b1fb86da-6.job','64');
DeleteFile('C:\Windows\Tasks\6c64da53-b139-49e8-a37a-ae13b1fb86da-7.job','64');
DeleteFile('C:\Windows\Tasks\BYAIAMUF.job','64');
DeleteFile('C:\Windows\Tasks\Crossbrowse.job','64');
DeleteFile('C:\Windows\Tasks\Tempo Runner socdhen.job','64');
DeleteFile('C:\Windows\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-6.job','64');
DeleteFile('C:\Windows\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7.job','64');
DeleteFile('C:\Windows\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-10_user.job','64');
DeleteFile('C:\Windows\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-3.job','64');
DeleteFile('C:\Windows\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-5.job','64');
DeleteFile('C:\Windows\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-5_user.job','64');
DeleteFile('C:\Windows\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-6.job','64');
DeleteFile('C:\Windows\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-7.job','64');
DeleteFile('C:\Windows\system32\Tasks\1862a7f8-fe41-431c-b01f-9874e72592c8-1-6','64');
DeleteFile('C:\Windows\system32\Tasks\1862a7f8-fe41-431c-b01f-9874e72592c8-1-7','64');
DeleteFile('C:\Windows\system32\Tasks\1862a7f8-fe41-431c-b01f-9874e72592c8-10_user','64');
DeleteFile('C:\Windows\system32\Tasks\1862a7f8-fe41-431c-b01f-9874e72592c8-5','64');
DeleteFile('C:\Windows\system32\Tasks\1862a7f8-fe41-431c-b01f-9874e72592c8-5_user','64');
DeleteFile('C:\Windows\system32\Tasks\1862a7f8-fe41-431c-b01f-9874e72592c8-6','64');
DeleteFile('C:\Windows\system32\Tasks\1862a7f8-fe41-431c-b01f-9874e72592c8-7','64');
DeleteFile('C:\Windows\system32\Tasks\67d2d40a-287d-4ff7-b77e-af07772770d4-1-6','64');
DeleteFile('C:\Windows\system32\Tasks\67d2d40a-287d-4ff7-b77e-af07772770d4-1-7','64');
DeleteFile('C:\Windows\system32\Tasks\67d2d40a-287d-4ff7-b77e-af07772770d4-10_user','64');
DeleteFile('C:\Windows\system32\Tasks\67d2d40a-287d-4ff7-b77e-af07772770d4-3','64');
DeleteFile('C:\Windows\system32\Tasks\67d2d40a-287d-4ff7-b77e-af07772770d4-5','64');
DeleteFile('C:\Windows\system32\Tasks\67d2d40a-287d-4ff7-b77e-af07772770d4-5_user','64');
DeleteFile('C:\Windows\system32\Tasks\67d2d40a-287d-4ff7-b77e-af07772770d4-6','64');
DeleteFile('C:\Windows\system32\Tasks\67d2d40a-287d-4ff7-b77e-af07772770d4-7','64');
DeleteFile('C:\Windows\system32\Tasks\6c64da53-b139-49e8-a37a-ae13b1fb86da-10_user','64');
DeleteFile('C:\Windows\system32\Tasks\6c64da53-b139-49e8-a37a-ae13b1fb86da-3','64');
DeleteFile('C:\Windows\system32\Tasks\6c64da53-b139-49e8-a37a-ae13b1fb86da-6','64');
DeleteFile('C:\Windows\system32\Tasks\6c64da53-b139-49e8-a37a-ae13b1fb86da-7','64');
DeleteFile('C:\Windows\system32\Tasks\BYAIAMUF','64');
DeleteFile('C:\Windows\system32\Tasks\Crossbrowse','64');
DeleteFile('C:\Windows\system32\Tasks\SmartWeb Upgrade Trigger Task','64');
DeleteFile('C:\Windows\system32\Tasks\WordSurfer Auto Updater 1.10.0.19 Core','64');
DeleteFile('C:\Windows\system32\Tasks\WordSurfer Auto Updater 1.10.0.19 Pending Update','64');
DeleteFile('C:\Windows\system32\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-6','64');
DeleteFile('C:\Windows\system32\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-1-7','64');
DeleteFile('C:\Windows\system32\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-10_user','64');
DeleteFile('C:\Windows\system32\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-3','64');
DeleteFile('C:\Windows\system32\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-5','64');
DeleteFile('C:\Windows\system32\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-6','64');
DeleteFile('C:\Windows\system32\Tasks\e653cf25-f107-4cbe-b8d1-5dadaea354f2-7','64');
DeleteFile('C:\Windows\system32\drivers\wsafd_1_10_0_19.sys','32');
DeleteFile('C:\Program Files (x86)\Internet Speed Checker\1862a7f8-fe41-431c-b01f-9874e72592c8-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\Internet Speed Checker\1862a7f8-fe41-431c-b01f-9874e72592c8-1-7.exe','32');
DeleteFile('C:\Program Files (x86)\Internet Speed Checker\1862a7f8-fe41-431c-b01f-9874e72592c8-10.exe','32');
DeleteFile('C:\Program Files (x86)\Internet Speed Checker\1862a7f8-fe41-431c-b01f-9874e72592c8-5.exe','32');
DeleteFile('C:\Program Files (x86)\Internet Speed Checker\1862a7f8-fe41-431c-b01f-9874e72592c8-6.exe','32');
DeleteFile('C:\Program Files (x86)\Internet Speed Checker\1862a7f8-fe41-431c-b01f-9874e72592c8-7.exe','32');
DeleteFile('c:\program files (x86)\03000200-1437756775-0500-0006-000700080009\hnsyb4d1.tmp','32');
DeleteFile('c:\program files (x86)\03000200-1437756775-0500-0006-000700080009\jnsv9f92.tmp','32');
DeleteFile('c:\program files (x86)\03000200-1437756775-0500-0006-000700080009\knsl880c.tmpfs','32');
DeleteFile('c:\program files (x86)\gmsd_ru_005010040\gmsd_ru_005010040.exe','32');
DeleteFile('c:\program files (x86)\wordsurfer_1.10.0.19\service\wsasvc.exe','32');
DeleteFile('c:\programdata\dhmreu\socahen.exe','32');
DeleteFile('c:\programdata\dhmreu\socwhen.exe','32');
DeleteFile('c:\temp\nsf9aa1.tmp','32');
DeleteFile('c:\temp\nss6153.tmp','32');
DeleteFile('c:\users\zhenya\appdata\local\gmsd_ru_005010040\upgmsd_ru_005010040.exe','32');
DeleteFile('c:\users\zhenya\appdata\local\smartweb\smartwebapp.exe','32');
DeleteFile('c:\users\zhenya\appdata\local\smartweb\smartwebhelper.exe','32');
DeleteFileMask('c:\users\zhenya\appdata\local\smartweb', '*', true, ' ');
DeleteDirectory('c:\users\zhenya\appdata\local\smartweb');
DeleteFileMask('c:\users\zhenya\appdata\local\gmsd_ru_005010040', '*', true, ' ');
DeleteDirectory('c:\users\zhenya\appdata\local\gmsd_ru_005010040');
DeleteFileMask('c:\programdata\dhmreu', '*', true, ' ');
DeleteDirectory('c:\programdata\dhmreu');
DeleteFileMask('c:\program files (x86)\wordsurfer_1.10.0.19', '*', true, ' ');
DeleteDirectory('c:\program files (x86)\wordsurfer_1.10.0.19');
DeleteFileMask('C:\Program Files (x86)\Internet Speed Checker', '*', true, ' ');
DeleteDirectory('C:\Program Files (x86)\Internet Speed Checker');
DeleteFileMask('C:\ProgramData\WindowsMangerProtect', '*', true, ' ');
DeleteDirectory('C:\ProgramData\WindowsMangerProtect');
DeleteFileMask('C:\Program Files (x86)\PlusHD-1.2V20.07', '*', true, ' ');
DeleteDirectory('C:\Program Files (x86)\PlusHD-1.2V20.07');
DeleteFileMask('C:\Program Files (x86)\Tencent', '*', true, ' ');
DeleteDirectory('C:\Program Files (x86)\Tencent');
DeleteFileMask('C:\Program Files (x86)\SavePass 1.1', '*', true, ' ');
DeleteDirectory('C:\Program Files (x86)\SavePass 1.1');
DeleteFileMask('C:\Program Files (x86)\Application Assistance', '*', true, ' ');
DeleteDirectory('C:\Program Files (x86)\Application Assistance');
DeleteFileMask('C:\Program Files (x86)\CinemaP-1.9cV16.03', '*', true, ' ');
DeleteDirectory('C:\Program Files (x86)\CinemaP-1.9cV16.03');
DeleteFileMask('C:\Program Files (x86)\Crossbrowse', '*', true, ' ');
DeleteDirectory('C:\Program Files (x86)\Crossbrowse');
DeleteService('Checker');
DeleteService('QMUdisk');
DeleteService('TS888x64');
DeleteService('WUL19');
DeleteService('bebtosho');
DeleteService('comyninu');
DeleteService('fydujusu');
DeleteService('hyverumu');
DeleteService('ipucatyj');
DeleteService('wsafd_1_10_0_19');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','SmartWeb');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','ap');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','gmsd_ru_005010040');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\RunOnce','upgmsd_ru_005010040.exe');
BC_ImportALL;
ExecuteSysClean;
BC_Activate;
ExecuteWizard('SCU', 2, 3, true);
RebootWindows(true);
end.
[/CODE]

После выполнения скрипта компьютер перезагрузится.

После перезагрузки:
- Выполните в AVZ:
Код:
[CODE]
begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.
[/CODE]
Файл quarantine.zip из папки AVZ загрузите по ссылке "Прислать запрошенный карантин" вверху темы.

- Подготовьте лог [URL="http://virusinfo.info/showthread.php?t=146192&p=1041844&viewfull=1#post1041844"]AdwCleaner[/URL] и приложите его в теме.

- Сделайте лог [URL=http://virusinfo.info/soft/tool.php?tool=checkbrowserlnk]Check Browsers' LNK[/URL] и приложите его в теме.