eqilqs в папке temp

nod32 постоянно убивает вирусы, пишет -очищен удалением, а я подозреваю,что они у меня не уходят. в папке local settings/temp i temporary internet files постоянно всякие подозрительные файлы поялвяются и захламляют память. помогите плиз.

Скачайте новую версию AVZ 4.32, обновите базы и переделайте логи.

так точно ) выкладываю

[B]Выполните скрипт в AVZ[/B] (AVZ, Меню Файл\Выполнить скрипт. [URL="http://virusinfo.info/showthread.php?t=7239"]Подробнее...[/URL]):
[code]
begin
SearchRootkit(true, true);
SetAVZGuardStatus(true);
QuarantineFile('C:\RECYCLER\S-1-5-21-0531005330-1854635221-302145622-6910\dllrun32.exe','');
QuarantineFile('C:\WINDOWS\System32\Drivers\yzxfzaen.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\yvlywlwp.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\yodbjuna.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\yhmsfwsa.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\xauvwtin.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\wmohryif.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\wkfnjyuv.sys','');
DeleteService('wkfnjyuv');
DeleteService('wmohryif');
DeleteService('xauvwtin');
DeleteService('yhmsfwsa');
DeleteService('yodbjuna');
DeleteService('yvlywlwp');
DeleteService('yzxfzaen');
DeleteService('vjsznzhh');
DeleteService('vmjecxxm');
DeleteService('vrggfwip');
DeleteService('vwrzrhtm');
DeleteService('vgjqxfky');
DeleteService('tdrmyhlp');
DeleteService('tkxrrgsd');
DeleteService('sqsytkya');
DeleteService('suuahgiu');
DeleteService('rxxfupvb');
DeleteService('qmmerrjy');
DeleteService('qapxfpda');
DeleteService('piwcqjbl');
DeleteService('oxjgwaeg');
DeleteService('neepmupg');
DeleteService('lcxibraz');
DeleteService('lvwkbsgh');
DeleteService('lwfhxuxk');
DeleteService('lzkqrmlq');
DeleteService('mmbdlhau');
DeleteService('mmggjnou');
DeleteService('ixdltsek');
DeleteService('jfhrmkdy');
DeleteService('kqnouxcf');
DeleteService('icdfigys');
DeleteService('iidmfxbc');
DeleteService('iikkyfan');
DeleteService('huyduqaw');
DeleteService('hkohwith');
DeleteService('gpvwqrzo');
DeleteService('glhorkvb');
DeleteService('frrircjz');
DeleteService('fbsfqxgg');
DeleteService('elwoicpd');
DeleteService('dlweifyq');
DeleteService('edascseq');
DeleteService('btioxosi');
DeleteService('arnuzrdx');
QuarantineFile('C:\WINDOWS\System32\Drivers\vwrzrhtm.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\vrggfwip.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\vmjecxxm.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\vjsznzhh.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\vgjqxfky.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\tkxrrgsd.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\tdrmyhlp.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\suuahgiu.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\sqsytkya.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\qmmerrjy.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\rxxfupvb.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\qapxfpda.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\piwcqjbl.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\neepmupg.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\oxjgwaeg.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\mmggjnou.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\mmbdlhau.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\lzkqrmlq.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\lwfhxuxk.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\lvwkbsgh.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\lcxibraz.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\kqnouxcf.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\jfhrmkdy.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\ixdltsek.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\iikkyfan.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\iidmfxbc.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\icdfigys.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\huyduqaw.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\hkohwith.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\gpvwqrzo.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\glhorkvb.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\frrircjz.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\fbsfqxgg.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\elwoicpd.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\edascseq.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\dlweifyq.sys','');
QuarantineFile('Beep.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\btioxosi.sys','');
QuarantineFile('C:\WINDOWS\System32\Drivers\arnuzrdx.sys','');
DeleteFile('C:\WINDOWS\System32\Drivers\arnuzrdx.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\btioxosi.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\dlweifyq.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\edascseq.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\elwoicpd.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\fbsfqxgg.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\frrircjz.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\glhorkvb.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\gpvwqrzo.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\hkohwith.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\huyduqaw.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\icdfigys.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\iidmfxbc.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\iikkyfan.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\ixdltsek.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\jfhrmkdy.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\kqnouxcf.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\lcxibraz.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\lvwkbsgh.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\lwfhxuxk.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\lzkqrmlq.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\mmbdlhau.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\mmggjnou.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\oxjgwaeg.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\neepmupg.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\piwcqjbl.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\qapxfpda.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\rxxfupvb.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\qmmerrjy.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\sqsytkya.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\suuahgiu.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\tdrmyhlp.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\tkxrrgsd.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\vgjqxfky.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\vjsznzhh.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\vmjecxxm.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\vrggfwip.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\vwrzrhtm.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\wkfnjyuv.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\wmohryif.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\xauvwtin.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\yhmsfwsa.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\yodbjuna.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\yvlywlwp.sys');
DeleteFile('C:\WINDOWS\System32\Drivers\yzxfzaen.sys');
DeleteFile('C:\RECYCLER\S-1-5-21-0531005330-1854635221-302145622-6910\dllrun32.exe');
DeleteFile('C:\Windows\Tasks\At1.job');
BC_ImportAll;
ExecuteRepair(9);
BC_DeleteSvc('wkfnjyuv');
BC_DeleteSvc('wmohryif');
BC_DeleteSvc('xauvwtin');
BC_DeleteSvc('yhmsfwsa');
BC_DeleteSvc('yodbjuna');
BC_DeleteSvc('yvlywlwp');
BC_DeleteSvc('yzxfzaen');
BC_DeleteSvc('vjsznzhh');
BC_DeleteSvc('vmjecxxm');
BC_DeleteSvc('vrggfwip');
BC_DeleteSvc('vwrzrhtm');
BC_DeleteSvc('vgjqxfky');
BC_DeleteSvc('tdrmyhlp');
BC_DeleteSvc('tkxrrgsd');
BC_DeleteSvc('sqsytkya');
BC_DeleteSvc('suuahgiu');
BC_DeleteSvc('rxxfupvb');
BC_DeleteSvc('qmmerrjy');
BC_DeleteSvc('qapxfpda');
BC_DeleteSvc('piwcqjbl');
BC_DeleteSvc('oxjgwaeg');
BC_DeleteSvc('neepmupg');
BC_DeleteSvc('lcxibraz');
BC_DeleteSvc('lvwkbsgh');
BC_DeleteSvc('lwfhxuxk');
BC_DeleteSvc('lzkqrmlq');
BC_DeleteSvc('mmbdlhau');
BC_DeleteSvc('mmggjnou');
BC_DeleteSvc('ixdltsek');
BC_DeleteSvc('jfhrmkdy');
BC_DeleteSvc('kqnouxcf');
BC_DeleteSvc('icdfigys');
BC_DeleteSvc('iidmfxbc');
BC_DeleteSvc('iikkyfan');
BC_DeleteSvc('huyduqaw');
BC_DeleteSvc('hkohwith');
BC_DeleteSvc('gpvwqrzo');
BC_DeleteSvc('glhorkvb');
BC_DeleteSvc('frrircjz');
BC_DeleteSvc('fbsfqxgg');
BC_DeleteSvc('elwoicpd');
BC_DeleteSvc('dlweifyq');
BC_DeleteSvc('edascseq');
BC_DeleteSvc('btioxosi');
BC_DeleteSvc('arnuzrdx');
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
[/code]
После выполнения скрипта компьютер перезагрузится.

После перезагрузки пришлите попавшие в карантин файлы согласно правилам (для отправки файлов следует воспользоваться ссылкой "[B][COLOR="Red"]Прислать запрошенные файлы[/COLOR][/B]" над первым сообщением темы).

[URL="http://virusinfo.info/showthread.php?t=4491"]Пофиксите[/URL]:
[CODE]F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)[/CODE]
[B]Beep.sys [/B]замените на аналогичный файл из дистрибутива.

Подготовьте новые логи.