Win32 Agent-VGV (Wrm)

Win32 Agent-VGV (Wrm)
Каждый раз при включении компа аваст выдаёт сообщение о вирусе. Не могу ликвидировать.
Помогите, пожалуйста, избавиться.
Заранее благодарна.

Отключите антивирус и интернет!

[URL="http://virusinfo.info/showthread.php?t=7239"]AVZ, меню "Файл - Выполнить скрипт" -- Скопировать ниже написанный скрипт-- Нажать кнопку "Запустить".[/URL]

[CODE]begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\DOCUME~1\8297~1\LOCALS~1\Temp\loader.exe','');
DeleteService('Winxh76');
DeleteService('Winuf32');
DeleteService('Winsc53');
DeleteService('Winsc08');
DeleteService('Winra32');
DeleteService('Winra18');
DeleteService('Winpy08');
DeleteService('Winox43');
DeleteService('Winlu76');
DeleteService('Winhq87');
DeleteService('Wingp43');
DeleteService('Windm54');
DeleteService('Winck08');
DeleteService('Winbi65');
DeleteService('Winaj76');
DeleteService('Winaj65');
QuarantineFile('C:\WINDOWS\System32\Drivers\Winxh76.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\Winuf32.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\Winsc53.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\Winsc08.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\Winra32.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\Winra18.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\Winpy08.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\Winox43.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\Winlu76.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\Winhq87.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\Wingp43.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\Windm54.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\Winck08.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\Winbi65.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\Winaj76.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\Winaj65.sys','');
DeleteService('WZCSVCSysmonLog');
DeleteService('TrkWksProtectedStorage');
DeleteService('RasAutodmadmin');
DeleteService('ProtectedStorageCOMSysApp');
DeleteService('PolicyAgentNtmsSvc');
DeleteService('oseRemoteRegistry');
DeleteService('NVSvcTrkWksProtectedStorage');
DeleteService('NetlogonRasAuto');
DeleteService('HTTPFilterEventSystem');
DeleteService('EventlogThemes');
DeleteService('DhcpUPSSSDPSRV');
DeleteService('DhcpUPS');
DeleteService('CiSvcSchedule');
DeleteService('BITSBrowser');
DeleteService('ALGstisvc');
QuarantineFile('C:\WINDOWS\system32\WinCtrl32.dll','');
DeleteFile('C:\WINDOWS\system32\WinCtrl32.dll');
DeleteFile('C:\WINDOWS\System32\Drivers\Winaj65.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\Winaj76.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\Winbi65.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\Winck08.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\Windm54.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\Wingp43.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\Winhq87.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\Winlu76.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\Winox43.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\Winpy08.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\Winra18.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\Winra32.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\Winsc08.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\Winsc53.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\Winuf32.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\Winxh76.sys');
DeleteFile('C:\DOCUME~1\8297~1\LOCALS~1\Temp\loader.exe');
DeleteFile('WinCtrl32.dll');
DelWinlogonNotifyByKeyName('WinCtrl32');
BC_ImportALL;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.[/CODE]

Пришлите карантин по правилам и повторите логи...

вкладываю логи. карантин отправила

[URL="http://virusinfo.info/showthread.php?t=4491"]Пофиксить[/URL]

[CODE]O20 - Winlogon Notify: WinCtrl32 - C:\WINDOWS\[/CODE]

[URL="http://virusinfo.info/showthread.php?t=7239"]AVZ, меню "Файл - Выполнить скрипт" -- Скопировать ниже написанный скрипт-- Нажать кнопку "Запустить".[/URL]

[CODE]begin
ClearQuarantine;
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteService('Winyi21');
DeleteService('Winnw65');
DeleteService('WZCSVCSysmonLog');
DeleteService('TrkWksProtectedStorage');
DeleteService('RasAutodmadmin');
DeleteService('ProtectedStorageCOMSysApp');
DeleteService('PolicyAgentNtmsSvc');
DeleteService('oseRemoteRegistry');
DeleteService('NVSvcTrkWksProtectedStorage');
DeleteService('NetlogonRasAuto');
DeleteService('MessengerMSDTC');
DeleteService('HTTPFilterEventSystem');
DeleteService('EventlogThemesNtLmSsp');
DeleteService('EventlogThemes');
DeleteService('DhcpUPSSSDPSRV');
DeleteService('DhcpUPS');
DeleteService('CiSvcSchedule');
DeleteService('BITSBrowser');
DeleteService('ALGstisvc');
DeleteFile('C:\WINDOWS\System32\Drivers\Winnw65.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\Winyi21.sys');
BC_ImportDeletedList;
ExecuteSysClean;
BC_DeleteSvc('Winyi21');
BC_DeleteSvc('Winnw65');
BC_DeleteSvc('WZCSVCSysmonLog');
BC_DeleteSvc('TrkWksProtectedStorage');
BC_DeleteSvc('RasAutodmadmin');
BC_DeleteSvc('ProtectedStorageCOMSysApp');
BC_DeleteSvc('PolicyAgentNtmsSvc');
BC_DeleteSvc('oseRemoteRegistry');
BC_DeleteSvc('NVSvcTrkWksProtectedStorage');
BC_DeleteSvc('NetlogonRasAuto');
BC_DeleteSvc('MessengerMSDTC');
BC_DeleteSvc('HTTPFilterEventSystem');
BC_DeleteSvc('EventlogThemesNtLmSsp');
BC_DeleteSvc('EventlogThemes');
BC_DeleteSvc('DhcpUPSSSDPSRV');
BC_DeleteSvc('DhcpUPS');
BC_DeleteSvc('CiSvcSchedule');
BC_DeleteSvc('BITSBrowser');
BC_DeleteSvc('ALGstisvc');
BC_Activate;
RebootWindows(true);
end.[/CODE]

Повторите логи...

готово

В логах чисто,жалобы есть?

Нет. Большое спасибо за помощь)

Статистика проведенного лечения:
[LIST][*]Получено карантинов: [B]1[/B][*]Обработано файлов: [B]43[/B][*]В ходе лечения обнаружены вредоносные программы:
[LIST=1][*] c:\\documents and settings\\мария\\local settings\\temp\\loader.exe - [B]Trojan-Downloader.Win32.Mutant.ask[/B] (DrWEB: Trojan.DownLoad.2077)[*] c:\\docume~1\\8297~1\\locals~1\\temp\\loader.exe - [B]Trojan-Downloader.Win32.Mutant.ask[/B] (DrWEB: Trojan.DownLoad.2077)[*] c:\\windows\\system32\\winctrl32.dll - [B]Trojan-Downloader.Win32.Mutant.aub[/B] (DrWEB: BackDoor.Bulknet.225)[/LIST][/LIST]