Перезагрузка ПК

Отключив интернет и антивирус, выполните скрипт в AVZ:
[code]
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\WINDOWS\system32\Drivers\Nsw51.sys','');
QuarantineFile('C:\DOCUME~1\ЛЮДМИЛА\LOCALS~1\Temp\adxapie.sys','');
QuarantineFile('C:\WINDOWS\system32\rasi.exe','');
QuarantineFile('C:\WINDOWS\system32\drivers\qcrkuwtlyw.sys','');
QuarantineFile('WinCtrl32.dll','');
QuarantineFile('C:\WINDOWS\System32\rs32net.exe','');
DeleteFile('C:\WINDOWS\system32\Drivers\Nsw51.sys');
DeleteFile('C:\WINDOWS\system32\rasi.exe');
DeleteFile('C:\DOCUME~1\ЛЮДМИЛА\LOCALS~1\Temp\adxapie.sys');
DeleteFile('C:\WINDOWS\System32\rs32net.exe');
DeleteFile('C:\WINDOWS\System32\WinCtrl32.dll');
DeleteFile('WinCtrl32.dll');
DeleteFile('C:\WINDOWS\system32\drivers\qcrkuwtlyw.sys');
BC_ImportALL;
ExecuteSysClean;
BC_DeleteSvc('ywbpixfzopblfgs');
BC_DeleteSvc('Winye72');
BC_DeleteSvc('Winye61');
BC_DeleteSvc('Winye38');
BC_DeleteSvc('Winxd48');
BC_DeleteSvc('Winwc51');
BC_DeleteSvc('Winvb51');
BC_DeleteSvc('Winvb27');
BC_DeleteSvc('Winua61');
BC_DeleteSvc('Winua16');
BC_DeleteSvc('Winua04');
BC_DeleteSvc('Winty51');
BC_DeleteSvc('Winty48');
BC_DeleteSvc('Winty15');
BC_DeleteSvc('Winty05');
BC_DeleteSvc('Winrw51');
BC_DeleteSvc('Winrw26');
BC_DeleteSvc('Winqv05');
BC_DeleteSvc('Winpu26');
BC_DeleteSvc('Winns84');
BC_DeleteSvc('Winns72');
BC_DeleteSvc('Winns48');
BC_DeleteSvc('Winns37');
BC_DeleteSvc('Winlq84');
BC_DeleteSvc('Winlq72');
BC_DeleteSvc('Winkp83');
BC_DeleteSvc('Winin73');
BC_DeleteSvc('Winjo72');
BC_DeleteSvc('Winin61');
BC_DeleteSvc('Winin27');
BC_DeleteSvc('Winhn73');
BC_DeleteSvc('Winhm83');
BC_DeleteSvc('Winhm26');
BC_DeleteSvc('Wingl84');
BC_DeleteSvc('Winfk61');
BC_DeleteSvc('Winfk50');
BC_DeleteSvc('Windi51');
BC_DeleteSvc('Windi50');
BC_DeleteSvc('Windi37');
BC_DeleteSvc('Windi26');
BC_DeleteSvc('Windi16');
BC_DeleteSvc('Winch72');
BC_DeleteSvc('Winch48');
BC_DeleteSvc('Winch15');
BC_DeleteSvc('Winbg50');
BC_DeleteSvc('Winbg37');
BC_DeleteSvc('Winaf40');
BC_DeleteSvc('Winae16');
BC_DeleteSvc('Puy50');
BC_DeleteSvc('adxapie');
BC_DeleteSvc('ProtectedStorageRemoteAccess');
BC_DeleteSvc('msupdate');
BC_Activate;
RebootWindows(true);
end.[/code]
Компьютер перезагрузится.
Пришлите карантин согласно приложению 3 правил
(загружать тут: [url]http://virusinfo.info/upload_virus.php?tid=40816[/url]).
Сделайте новые логи.