Баннер при загрузке Windows

Приветствую всех. Пишу с зараженного ПК соседа, симптомы заражения такие: при загрузке выплывает светло-синий баннер о том, что Windows заблокирован. Мышь за пределы экрана баннера не может вылезти, диспетчер задач автоматом закрывается. Рабочего стола нету, "Пуска" тоже нету. В безопасный режим не войти, тоже выплывает этот баннер. Каким-то чудом обошли этот баннер и просканировали систему через 2 утилиты. Посмотрите пожалуйста эти файлы.

После проверки avz запустился рабочий стол (через диспетчер задач запустил explorer.exe).

Выполните скрипт в AVZ
[code]begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\Documents and Settings\Женя\Local Settings\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\Local Settings\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\Local Settings\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\AppData\Local\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\AppData\Local\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
QuarantineFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
','');
DeleteFile('C:\Documents and Settings\Женя\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Opera\Opera\temporary_downloads\flash_player.exe
');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end. [/code]Компьютер перезагрузится.

Пришлите карантин согласно [B]Приложения 3[/B] правил по красной ссылке [COLOR="Red"][U][B]Прислать запрошенный карантин[/B][/U][/COLOR] вверху темы

Очистите кэш Опера

Сделайте новые логи