Sanitar Diska...

Выкладываю файлы...

выполните скрипт ...
[code]
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DelBHO('{E512DEAA-C987-47AA-B113-9D7289B91897}');
DelBHO('{8F00D991-28CE-4AC6-ABDD-147AE67795F8}');
DelBHO('{4E042D5E-3810-4640-80EE-8FC30ACE1D06}');
QuarantineFile('C:\Documents and Settings\Little Spy\Local Settings\Temporary Internet Files\Content.IE5\MNYT0NCL\3077ahntdksr[1].dll','');
DelBHO('{03E3D45B-681C-481C-B6A3-0D08B12C4AB9}');
QuarantineFile('C:\WINDOWS\system32\ewpaoupw.dll','');
QuarantineFile('C:\WINDOWS\system32\vtUkkljH.dll','');
QuarantineFile('C:\WINDOWS\system32\yayaBrqQ.dll','');
DeleteFile('C:\WINDOWS\system32\yayaBrqQ.dll');
DeleteFile('C:\WINDOWS\system32\vtUkkljH.dll');
DeleteFile('C:\WINDOWS\system32\ewpaoupw.dll');
DeleteFile('yayaBrqQ.dll');
DeleteFile('C:\Documents and Settings\Little Spy\Local Settings\Temporary Internet Files\Content.IE5\MNYT0NCL\3077ahntdksr[1].dll');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
[/code]
пришлите карантин согласно приложения 3 правил ...
повторите логи ...

логи...

пофиксите ...
[code]
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: (no name) - {03E3D45B-681C-481C-B6A3-0D08B12C4AB9} - C:\WINDOWS\system32\yayaBrqQ.dll (file missing)
O2 - BHO: (no name) - {413B7310-595C-4A16-9C26-F9E72D0DA7F4} - C:\WINDOWS\system32\vtUkkljH.dll (file missing)
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZKxdm022YYRU
O20 - Winlogon Notify: yayaBrqQ - C:\WINDOWS\
[/code]
выполните скрипт ...
[code]
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DelBHO('{413B7310-595C-4A16-9C26-F9E72D0DA7F4}');
DelBHO('{03E3D45B-681C-481C-B6A3-0D08B12C4AB9}');
DeleteFile('C:\WINDOWS\system32\yayaBrqQ.dll');
DeleteFile('C:\WINDOWS\system32\vtUkkljH.dll');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
end.
[/code]
пришлите карантин согласно приложения 3 правил ...
повторите логи ...

Статистика проведенного лечения:
[LIST][*]Получено карантинов: [B]1[/B][*]Обработано файлов: [B]4[/B][*]В ходе лечения обнаружены вредоносные программы:
[LIST=1][*] c:\\documents and settings\\little spy\\local settings\\temporary internet files\\content.ie5\\mnyt0ncl\\3077ahntdksr[1].dll - [B]Rootkit.Win32.Podnuha.zn[/B] (DrWEB: Trojan.DownLoad.4182)[*] c:\\windows\\system32\\ewpaoupw.dll - [B]not-a-virus:AdWare.Win32.BHO.cbd[/B] (DrWEB: Trojan.BhoSearcher.5)[*] c:\\windows\\system32\\vtukkljh.dll - [B]Trojan.Win32.Monderc.gen[/B] (DrWEB: Trojan.Virtumod.based.21)[*] c:\\windows\\system32\\yayabrqq.dll - [B]Trojan.Win32.Monderc.gen[/B] (DrWEB: Trojan.Virtumod.based.21)[/LIST][/LIST]