Malware doctor

соответственно логи

[b]Отключите службу восстановления системы[/b] (см. Приложение 1 Правил).

Закройте все программы. Запустите AVZ.
Выполните скрипт через меню Файл:
[code]
begin
SetAVZGuardStatus(True);
QuarantineFile('D:\WINDOWS\System32\drivers\cf799635.sys','');
QuarantineFile('D:\WINDOWS\System32\drivers\96774b4e.sys','');
QuarantineFile('D:\WINDOWS\System32\drivers\886a7a.sys','');
QuarantineFile('D:\WINDOWS\System32\drivers\70fd13b6.sys','');
QuarantineFile('D:\WINDOWS\System32\drivers\57da82a2.sys','');
ExecuteRepair(9);
ExecuteRepair(17);
ExecuteRepair(11);
ExecuteRepair(6);
SetAVZPMStatus(True);
QuarantineFile('D:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\65K6HJEW\mlw[1].exe','');
QuarantineFile('D:\WINDOWS\system32\vp_setup.exe','');
QuarantineFile('D:\WINDOWS\system32\tj.exe','');
QuarantineFile('H:\autorun.inf','');
QuarantineFile('jbnmck.dll','');
DelBHO('{aff01325-0fc2-4749-8914-fbf0565ad9cc}');
DelBHO('{CF272101-7F6E-4CF2-9453-B4C5D2FC32C0}');
QuarantineFile('digiwet.dll','');
QuarantineFile('digeste.dll','');
QuarantineFile('c:\progra~1\ThunMail\testabd.dll','');
QuarantineFile('c:\program Files\ThunMail\testabd.exe','');
QuarantineFile('D:\Documents and Settings\LocalService\Application Data\691447002.exe','');
DeleteService('lanmanserverpolicyagent');
DeleteService('ProtectedStorageWmdmPmSN');
QuarantineFile('D:\WINDOWS\system32\accwizo.exe','');
QuarantineFile('D:\WINDOWS\system32\1042e.exe','');
DeleteService('avast!antivirus');
QuarantineFile('D:\WINDOWS\system32\jbnmck.dll','');
QuarantineFile('D:\PROGRA~1\FieryAds\FieryAds.dll','');
QuarantineFile('D:\PROGRA~1\FieryAds\CommLayer.dll','');
QuarantineFile('d:\windows\system32\config\systemprofile\local settings\application data\minisvr4.exe','');
QuarantineFile('d:\windows\system32\avast!antivirus.exe','');
DeleteFile('d:\windows\system32\avast!antivirus.exe');
DeleteFile('D:\PROGRA~1\FieryAds\CommLayer.dll');
DeleteFile('D:\PROGRA~1\FieryAds\FieryAds.dll');
DeleteFile('D:\WINDOWS\system32\jbnmck.dll');
DeleteFile('D:\WINDOWS\system32\1042e.exe');
DeleteFile('D:\WINDOWS\system32\accwizo.exe');
DeleteFile('D:\Documents and Settings\LocalService\Application Data\691447002.exe');
DeleteFile('D:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\minisvr4.exe');
DeleteFile('digeste.dll');
DeleteFile('digiwet.dll');
DeleteFile('jbnmck.dll');
DeleteFile('H:\autorun.inf');
DeleteFile('L:\autorun.inf');
DeleteFile('D:\WINDOWS\system32\tj.exe');
DeleteFile('D:\WINDOWS\system32\vp_setup.exe');
DeleteFile('D:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\65K6HJEW\mlw[1].exe');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
[/code]
Компьютер перезагрузится.
Пришлите карантин через ссылку [b][color=red]Прислать запрошенный карантин [/color][/b] вверху темы, как написано в приложении 3 Правил.

Сделайте новые логи AVZ и приложите к этой теме.