ggdrive.exe... Прошу помощи.

Здравствуйте!

Завелась, как и у многих других пользователей, сия гадость и у меня. Симптомы все те же - пропадающий инет либо отказ браузеров загружать страницы, периодическое замедление работы компьютера, файлы с цифровыми именами (20, 31 и т.п.). Убирать всячески пробовал, различные антивирусы и программы проверки файл видят, удаляют, но он, зараза этакая, снова появляется. Из реестра строки с богомерзким именем удалял, а воз и ныне там. Помогите избавиться, если можно.:)
Нужные логи прилагаю.

:O
Закройте/выгрузите все программы кроме AVZ и Internet Explorer.

- Отключите Антивирус и Файрвол.
- Отключите Системное восстановление.

Если эти ip-адреса не ваши 10.250.0.9 8.8.4.4 в HiJackThis пофиксите:

[code]
O17 - HKLM\System\CCS\Services\Tcpip\..\{54449796-DA22-4207-B1C0-C10E7BFA2FFB}: NameServer = 10.250.0.9 8.8.4.4
[/code]

В AVZ выполните скрипт:

[code]
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
ClearQuarantine;
QuarantineFile('C:\WINDOWS\system32\86.exe','');
QuarantineFile('C:\WINDOWS\system32\67.exe','');
QuarantineFile('C:\WINDOWS\system32\51.exe','');
QuarantineFile('C:\WINDOWS\system32\34.exe','');
QuarantineFile('C:\WINDOWS\system32\30.exe','');
QuarantineFile('C:\WINDOWS\system32\16.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\csisf.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010645.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010608.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010574.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010258.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010256.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010255.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010254.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010251.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010233.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010232.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010228.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010225.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0008747.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\9452687.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\8879836.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\8627947.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\85.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\82.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\76.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\72.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\70.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\68.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\63[1].exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\57.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\48.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\47.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\463501.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\41.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\40.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\3810.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\3044226.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\2985.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\27.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\26799.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\21.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\172.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\15.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\1422.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\12011.exe','');
QuarantineFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\05.exe','');
QuarantineFile('c:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\acleaner.exe','');
QuarantineFile('C:\WINDOWS\ggdrive32.exe','');
DeleteService('wfftttmo');
DeleteService('xevoooge');
DeleteService('xgroixze');
DeleteService('xlslfhrc');
DeleteService('xtdxpjcz');
DeleteService('yreabmpz');
DeleteService('ysmogvja');
DeleteService('yttpssty');
DeleteService('zfkhutwz');
DeleteService('zliunegj');
DeleteService('zmgrzavs');
QuarantineFile('C:\WINDOWS\system32\drivers\zmgrzavs.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\zliunegj.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\zfkhutwz.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\yttpssty.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\ysmogvja.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\yreabmpz.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\xtdxpjcz.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\xlslfhrc.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\xgroixze.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\xevoooge.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\wfftttmo.sys','');
DeleteService('viddifls');
DeleteService('vqoqqhrz');
QuarantineFile('C:\WINDOWS\system32\drivers\vqoqqhrz.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\viddifls.sys','');
DeleteService('uujgnilr');
DeleteService('vbnefzgp');
DeleteService('vehgnnrn');
DeleteService('veseprtc');
QuarantineFile('C:\WINDOWS\system32\drivers\veseprtc.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\vehgnnrn.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\vbnefzgp.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\uujgnilr.sys','');
DeleteService('uiiamohd');
DeleteService('ufjdewwc');
DeleteService('ueydmxvc');
QuarantineFile('C:\WINDOWS\system32\drivers\uiiamohd.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\ufjdewwc.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\ueydmxvc.sys','');
DeleteService('sismdcla');
DeleteService('sjqkixxj');
DeleteService('smchfese');
QuarantineFile('C:\WINDOWS\system32\drivers\smchfese.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\sjqkixxj.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\sismdcla.sys','');
DeleteService('qmhlywab');
DeleteService('qogmlzkj');
DeleteService('rihwhydy');
DeleteService('rizjepsm');
DeleteService('rsftvdzi');
DeleteService('rwayexpi');
DeleteService('sazfzifj');
DeleteService('sdcaazut');
QuarantineFile('C:\WINDOWS\system32\drivers\sdcaazut.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\sazfzifj.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\rwayexpi.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\rsftvdzi.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\rizjepsm.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\rihwhydy.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\qogmlzkj.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\qmhlywab.sys','');
DeleteService('pergowvo');
DeleteService('pmcvicku');
DeleteService('pptxkqpn');
DeleteService('pqxbrbyr');
DeleteService('pstudlod');
DeleteService('pzarlrhb');
DeleteService('qbmdcbtb');
DeleteService('qcokscln');
DeleteService('qcxhglgl');
DeleteService('qjurombh');
QuarantineFile('C:\WINDOWS\system32\drivers\qjurombh.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\qcxhglgl.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\qcokscln.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\qbmdcbtb.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\pzarlrhb.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\pstudlod.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\pqxbrbyr.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\pptxkqpn.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\pmcvicku.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\pergowvo.sys','');
DeleteService('niafqcwl');
DeleteService('nkvzhqzx');
DeleteService('nqgydrut');
DeleteService('nuzholqx');
DeleteService('nyomqpde');
DeleteService('nyzyxdnk');
DeleteService('ocrkouzc');
DeleteService('olgocfwv');
DeleteService('omsrcrvc');
DeleteService('ozsbbjvp');
DeleteService('pcdqgxxu');
QuarantineFile('C:\WINDOWS\system32\drivers\pcdqgxxu.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\ozsbbjvp.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\omsrcrvc.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\olgocfwv.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\ocrkouzc.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\nyzyxdnk.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\nyomqpde.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\nuzholqx.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\nqgydrut.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\nkvzhqzx.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\niafqcwl.sys','');
DeleteService('leapvlls');
DeleteService('lizpdxip');
DeleteService('mbvkldfi');
DeleteService('mhblflne');
DeleteService('mqqslefa');
QuarantineFile('C:\WINDOWS\system32\drivers\mqqslefa.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\mhblflne.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\mbvkldfi.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\lizpdxip.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\leapvlls.sys','');
DeleteService('iorgoqfw');
DeleteService('iptzlhiy');
DeleteService('ivbbplbi');
DeleteService('jdtkksxa');
DeleteService('jiaulzed');
DeleteService('jjuhkhhs');
DeleteService('jpzwgyfe');
DeleteService('kqiiobld');
DeleteService('kxaqdizn');
QuarantineFile('C:\WINDOWS\system32\drivers\kxaqdizn.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\kqiiobld.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\jpzwgyfe.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\jjuhkhhs.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\jiaulzed.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\jdtkksxa.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\ivbbplbi.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\iptzlhiy.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\iorgoqfw.sys','');
DeleteService('idkondjo');
QuarantineFile('C:\WINDOWS\system32\drivers\idkondjo.sys','');
DeleteService('huuartha');
QuarantineFile('C:\WINDOWS\system32\drivers\huuartha.sys','');
DeleteService('dymbgwsw');
DeleteService('dzmclyeu');
DeleteService('eaesngjc');
DeleteService('edfyjumv');
DeleteService('efwdiiwy');
DeleteService('ejwdvqlx');
DeleteService('ektjkgxf');
DeleteService('eothckss');
DeleteService('eowswpjs');
DeleteService('ezeqmzzi');
DeleteService('fftvvvmj');
DeleteService('fkqarppx');
DeleteService('fnpluyfa');
DeleteService('fpafbwkm');
DeleteService('fttobxao');
DeleteService('fuifyxon');
DeleteService('fzhiihrg');
DeleteService('gcuopcms');
DeleteService('gfertcbw');
DeleteService('gpvgthye');
DeleteService('gxbfozyf');
DeleteService('hlocfkcq');
QuarantineFile('C:\WINDOWS\system32\drivers\hlocfkcq.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\gxbfozyf.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\gpvgthye.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\gfertcbw.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\gcuopcms.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\fzhiihrg.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\fuifyxon.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\fttobxao.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\fpafbwkm.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\fnpluyfa.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\fkqarppx.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\fftvvvmj.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\ezeqmzzi.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\eowswpjs.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\eothckss.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\ektjkgxf.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\ejwdvqlx.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\efwdiiwy.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\edfyjumv.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\eaesngjc.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\dzmclyeu.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\dymbgwsw.sys','');
DeleteService('dirsbybt');
DeleteService('djpusxud');
DeleteService('dkiuftyy');
DeleteService('dmhhgrfe');
DeleteService('dnpcqzhc');
QuarantineFile('C:\WINDOWS\system32\drivers\dnpcqzhc.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\dmhhgrfe.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\dkiuftyy.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\djpusxud.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\dirsbybt.sys','');
DeleteService('ddxfvscp');
DeleteService('dfscnmgoiiwbi');
QuarantineFile('C:\WINDOWS\system32\drivers\zhvbbzuaxsqm.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\ddxfvscp.sys','');
DeleteService('dabktssk');
QuarantineFile('C:\WINDOWS\system32\drivers\dabktssk.sys','');
DeleteService('cyoreumw');
QuarantineFile('C:\WINDOWS\system32\drivers\cyoreumw.sys','');
DeleteService('chvysvvs');
DeleteService('ciqvctdo');
QuarantineFile('C:\WINDOWS\system32\drivers\ciqvctdo.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\chvysvvs.sys','');
DeleteService('ayrwkevs');
DeleteService('aysuueas');
DeleteService('bajiwrux');
DeleteService('bbrtavjd');
DeleteService('bivcyleo');
DeleteService('buancuum');
DeleteService('bxpfctec');
DeleteService('cazcfjeb');
QuarantineFile('C:\WINDOWS\system32\drivers\cazcfjeb.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\bxpfctec.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\buancuum.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\bivcyleo.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\bbrtavjd.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\bajiwrux.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\aysuueas.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\ayrwkevs.sys','');
DeleteService('armrkdmf');
QuarantineFile('C:\WINDOWS\system32\drivers\armrkdmf.sys','');
DeleteService('altwfdas');
QuarantineFile('C:\WINDOWS\system32\drivers\altwfdas.sys','');
DeleteService('adsqlpcs');
DeleteService('afmwnrjr');
QuarantineFile('C:\WINDOWS\system32\drivers\afmwnrjr.sys','');
QuarantineFile('C:\WINDOWS\system32\drivers\adsqlpcs.sys','');
DeleteFile('C:\WINDOWS\system32\drivers\adsqlpcs.sys');
DeleteFile('C:\WINDOWS\system32\drivers\afmwnrjr.sys');
DeleteFile('C:\WINDOWS\system32\drivers\altwfdas.sys');
DeleteFile('C:\WINDOWS\system32\drivers\armrkdmf.sys');
DeleteFile('C:\WINDOWS\system32\drivers\ayrwkevs.sys');
DeleteFile('C:\WINDOWS\system32\drivers\aysuueas.sys');
DeleteFile('C:\WINDOWS\system32\drivers\bajiwrux.sys');
DeleteFile('C:\WINDOWS\system32\drivers\bbrtavjd.sys');
DeleteFile('C:\WINDOWS\system32\drivers\bivcyleo.sys');
DeleteFile('C:\WINDOWS\system32\drivers\buancuum.sys');
DeleteFile('C:\WINDOWS\system32\drivers\bxpfctec.sys');
DeleteFile('C:\WINDOWS\system32\drivers\cazcfjeb.sys');
DeleteFile('C:\WINDOWS\system32\drivers\chvysvvs.sys');
DeleteFile('C:\WINDOWS\system32\drivers\ciqvctdo.sys');
DeleteFile('C:\WINDOWS\system32\drivers\cyoreumw.sys');
DeleteFile('C:\WINDOWS\system32\drivers\dabktssk.sys');
DeleteFile('C:\WINDOWS\system32\drivers\ddxfvscp.sys');
DeleteFile('C:\WINDOWS\system32\drivers\zhvbbzuaxsqm.sys');
DeleteFile('C:\WINDOWS\system32\drivers\dirsbybt.sys');
DeleteFile('C:\WINDOWS\system32\drivers\djpusxud.sys');
DeleteFile('C:\WINDOWS\system32\drivers\dkiuftyy.sys');
DeleteFile('C:\WINDOWS\system32\drivers\dmhhgrfe.sys');
DeleteFile('C:\WINDOWS\system32\drivers\dnpcqzhc.sys');
DeleteFile('C:\WINDOWS\system32\drivers\dymbgwsw.sys');
DeleteFile('C:\WINDOWS\system32\drivers\dzmclyeu.sys');
DeleteFile('C:\WINDOWS\system32\drivers\eaesngjc.sys');
DeleteFile('C:\WINDOWS\system32\drivers\edfyjumv.sys');
DeleteFile('C:\WINDOWS\system32\drivers\efwdiiwy.sys');
DeleteFile('C:\WINDOWS\system32\drivers\ejwdvqlx.sys');
DeleteFile('C:\WINDOWS\system32\drivers\ektjkgxf.sys');
DeleteFile('C:\WINDOWS\system32\drivers\eothckss.sys');
DeleteFile('C:\WINDOWS\system32\drivers\eowswpjs.sys');
DeleteFile('C:\WINDOWS\system32\drivers\ezeqmzzi.sys');
DeleteFile('C:\WINDOWS\system32\drivers\fftvvvmj.sys');
DeleteFile('C:\WINDOWS\system32\drivers\fkqarppx.sys');
DeleteFile('C:\WINDOWS\system32\drivers\fnpluyfa.sys');
DeleteFile('C:\WINDOWS\system32\drivers\fpafbwkm.sys');
DeleteFile('C:\WINDOWS\system32\drivers\fttobxao.sys');
DeleteFile('C:\WINDOWS\system32\drivers\fuifyxon.sys');
DeleteFile('C:\WINDOWS\system32\drivers\fzhiihrg.sys');
DeleteFile('C:\WINDOWS\system32\drivers\gcuopcms.sys');
DeleteFile('C:\WINDOWS\system32\drivers\gfertcbw.sys');
DeleteFile('C:\WINDOWS\system32\drivers\gpvgthye.sys');
DeleteFile('C:\WINDOWS\system32\drivers\gxbfozyf.sys');
DeleteFile('C:\WINDOWS\system32\drivers\hlocfkcq.sys');
DeleteFile('C:\WINDOWS\system32\drivers\huuartha.sys');
DeleteFile('C:\WINDOWS\system32\drivers\idkondjo.sys');
DeleteFile('C:\WINDOWS\system32\drivers\iorgoqfw.sys');
DeleteFile('C:\WINDOWS\system32\drivers\iptzlhiy.sys');
DeleteFile('C:\WINDOWS\system32\drivers\ivbbplbi.sys');
DeleteFile('C:\WINDOWS\system32\drivers\jdtkksxa.sys');
DeleteFile('C:\WINDOWS\system32\drivers\jiaulzed.sys');
DeleteFile('C:\WINDOWS\system32\drivers\jjuhkhhs.sys');
DeleteFile('C:\WINDOWS\system32\drivers\jpzwgyfe.sys');
DeleteFile('C:\WINDOWS\system32\drivers\kqiiobld.sys');
DeleteFile('C:\WINDOWS\system32\drivers\kxaqdizn.sys');
DeleteFile('C:\WINDOWS\system32\drivers\leapvlls.sys');
DeleteFile('C:\WINDOWS\system32\drivers\lizpdxip.sys');
DeleteFile('C:\WINDOWS\system32\drivers\mbvkldfi.sys');
DeleteFile('C:\WINDOWS\system32\drivers\mhblflne.sys');
DeleteFile('C:\WINDOWS\system32\drivers\mqqslefa.sys');
DeleteFile('C:\WINDOWS\system32\drivers\niafqcwl.sys');
DeleteFile('C:\WINDOWS\system32\drivers\nkvzhqzx.sys');
DeleteFile('C:\WINDOWS\system32\drivers\nqgydrut.sys');
DeleteFile('C:\WINDOWS\system32\drivers\nuzholqx.sys');
DeleteFile('C:\WINDOWS\system32\drivers\nyomqpde.sys');
DeleteFile('C:\WINDOWS\system32\drivers\nyzyxdnk.sys');
DeleteFile('C:\WINDOWS\system32\drivers\ocrkouzc.sys');
DeleteFile('C:\WINDOWS\system32\drivers\olgocfwv.sys');
DeleteFile('C:\WINDOWS\system32\drivers\omsrcrvc.sys');
DeleteFile('C:\WINDOWS\system32\drivers\ozsbbjvp.sys');
DeleteFile('C:\WINDOWS\system32\drivers\pcdqgxxu.sys');
DeleteFile('C:\WINDOWS\system32\drivers\pergowvo.sys');
DeleteFile('C:\WINDOWS\system32\drivers\pmcvicku.sys');
DeleteFile('C:\WINDOWS\system32\drivers\pptxkqpn.sys');
DeleteFile('C:\WINDOWS\system32\drivers\pqxbrbyr.sys');
DeleteFile('C:\WINDOWS\system32\drivers\pstudlod.sys');
DeleteFile('C:\WINDOWS\system32\drivers\pzarlrhb.sys');
DeleteFile('C:\WINDOWS\system32\drivers\qbmdcbtb.sys');
DeleteFile('C:\WINDOWS\system32\drivers\qcokscln.sys');
DeleteFile('C:\WINDOWS\system32\drivers\qcxhglgl.sys');
DeleteFile('C:\WINDOWS\system32\drivers\qjurombh.sys');
DeleteFile('C:\WINDOWS\system32\drivers\qmhlywab.sys');
DeleteFile('C:\WINDOWS\system32\drivers\qogmlzkj.sys');
DeleteFile('C:\WINDOWS\system32\drivers\rihwhydy.sys');
DeleteFile('C:\WINDOWS\system32\drivers\rizjepsm.sys');
DeleteFile('C:\WINDOWS\system32\drivers\rsftvdzi.sys');
DeleteFile('C:\WINDOWS\system32\drivers\rwayexpi.sys');
DeleteFile('C:\WINDOWS\system32\drivers\sazfzifj.sys');
DeleteFile('C:\WINDOWS\system32\drivers\sdcaazut.sys');
DeleteFile('C:\WINDOWS\system32\drivers\sismdcla.sys');
DeleteFile('C:\WINDOWS\system32\drivers\sjqkixxj.sys');
DeleteFile('C:\WINDOWS\system32\drivers\smchfese.sys');
DeleteFile('C:\WINDOWS\system32\drivers\ueydmxvc.sys');
DeleteFile('C:\WINDOWS\system32\drivers\ufjdewwc.sys');
DeleteFile('C:\WINDOWS\system32\drivers\uiiamohd.sys');
DeleteFile('C:\WINDOWS\system32\drivers\uujgnilr.sys');
DeleteFile('C:\WINDOWS\system32\drivers\vbnefzgp.sys');
DeleteFile('C:\WINDOWS\system32\drivers\vehgnnrn.sys');
DeleteFile('C:\WINDOWS\system32\drivers\veseprtc.sys');
DeleteFile('C:\WINDOWS\system32\drivers\viddifls.sys');
DeleteFile('C:\WINDOWS\system32\drivers\vqoqqhrz.sys');
DeleteFile('C:\WINDOWS\system32\drivers\wfftttmo.sys');
DeleteFile('C:\WINDOWS\system32\drivers\xevoooge.sys');
DeleteFile('C:\WINDOWS\system32\drivers\xgroixze.sys');
DeleteFile('C:\WINDOWS\system32\drivers\xlslfhrc.sys');
DeleteFile('C:\WINDOWS\system32\drivers\xtdxpjcz.sys');
DeleteFile('C:\WINDOWS\system32\drivers\yreabmpz.sys');
DeleteFile('C:\WINDOWS\system32\drivers\ysmogvja.sys');
DeleteFile('C:\WINDOWS\system32\drivers\yttpssty.sys');
DeleteFile('C:\WINDOWS\system32\drivers\zfkhutwz.sys');
DeleteFile('C:\WINDOWS\system32\drivers\zliunegj.sys');
DeleteFile('C:\WINDOWS\system32\drivers\zmgrzavs.sys');
DeleteFile('C:\WINDOWS\ggdrive32.exe');
BC_DeleteFile('C:\WINDOWS\ggdrive32.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Microsoft Driver Setup');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','Microsoft Driver Setup');
DeleteFile('c:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\acleaner.exe');
BC_DeleteFile('c:\RECYCLER\R-1-5-21-1482476501-1644491937-682003330-1013\acleaner.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\05.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\12011.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\1422.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\15.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\172.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\21.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\26799.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\27.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\2985.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\3044226.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\3810.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\40.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\41.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\463501.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\47.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\48.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\57.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\63[1].exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\68.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\70.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\72.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\76.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\82.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\85.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\8627947.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\8879836.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\9452687.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0008747.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010225.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010228.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010232.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010233.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010251.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010254.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010255.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010256.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010258.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010574.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010608.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\A0010645.exe');
DeleteFile('C:\Documents and Settings\Администратор\DoctorWeb\Quarantine\csisf.exe');
DeleteFile('C:\WINDOWS\system32\16.exe');
DeleteFile('C:\WINDOWS\system32\30.exe');
DeleteFile('C:\WINDOWS\system32\34.exe');
DeleteFile('C:\WINDOWS\system32\51.exe');
DeleteFile('C:\WINDOWS\system32\67.exe');
DeleteFile('C:\WINDOWS\system32\86.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows NT\CurrentVersion\Winlogon','Taskman ');
DeleteFileMask('c:\RECYCLER\', '*.*', true);
BC_ImportAll;
ExecuteSysClean;
ExecuteWizard('TSW',2,2,true);
BC_Activate;
RebootWindows(true);
end.
[/code]

После перезагрузки

[code]
begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.
[/code]

Пришлите карантин [b]quarantine.zip[/b] по красной ссылке [B][COLOR="Red"][U]Прислать запрошенный карантин[/U][/COLOR][/B] вверху темы.
Логи повторите.

Сделано.:)

Если не трудно :), просканируйте систему загрузившись с live cd [url]http://virusinfo.info/showthread.php?t=15927[/url]
Возможен файловый вирус. После этого повторите логи.

Итог лечения

Статистика проведенного лечения:
[LIST][*]Получено карантинов: [B]1[/B][*]Обработано файлов: [B]374[/B][*]В ходе лечения обнаружены вредоносные программы:
[LIST=1][*] c:\\recycler\\r-1-5-21-1482476501-1644491937-682003330-1013\\acleaner.exe - [B]Trojan.Win32.Pincav.aywr[/B] ( DrWEB: Win32.HLLW.Autoruner.45205, BitDefender: Trojan.Autoit.AOH, NOD32: Win32/AutoRun.KS worm, AVAST4: Win32:VB-RBI [Trj] )[*] c:\\windows\\ggdrive32.exe - [B]Net-Worm.Win32.Kolab.tcv[/B] ( DrWEB: BackDoor.IRC.Bot.166, BitDefender: Trojan.Generic.KD.125050, NOD32: IRC/SdBot trojan, AVAST4: Win32:VB-RBI [Trj] )[*] c:\\windows\\system32\\16.exe - [B]Packed.Win32.Krap.ig[/B] ( DrWEB: BackDoor.Ddoser.131, BitDefender: Gen:Trojan.Heur.RP.emW@amv7R3cG, NOD32: IRC/SdBot trojan, AVAST4: Win32:Downloader-FLZ [Trj] )[*] c:\\windows\\system32\\30.exe - [B]Packed.Win32.Krap.ig[/B] ( DrWEB: BackDoor.Ddoser.131, BitDefender: Gen:Trojan.Heur.RP.emW@amv7R3cG, NOD32: IRC/SdBot trojan, AVAST4: Win32:Downloader-FLZ [Trj] )[*] c:\\windows\\system32\\34.exe - [B]Packed.Win32.Krap.ig[/B] ( DrWEB: BackDoor.Ddoser.131, BitDefender: Gen:Trojan.Heur.RP.emW@amv7R3cG, NOD32: IRC/SdBot trojan, AVAST4: Win32:Downloader-FLZ [Trj] )[*] c:\\windows\\system32\\51.exe - [B]Packed.Win32.Krap.ig[/B] ( DrWEB: BackDoor.Ddoser.131, BitDefender: Gen:Trojan.Heur.RP.emW@amv7R3cG, NOD32: IRC/SdBot trojan, AVAST4: Win32:Downloader-FLZ [Trj] )[*] c:\\windows\\system32\\67.exe - [B]Packed.Win32.Krap.ig[/B] ( DrWEB: BackDoor.Ddoser.131, BitDefender: Gen:Trojan.Heur.RP.emW@amv7R3cG, NOD32: IRC/SdBot trojan, AVAST4: Win32:Downloader-FLZ [Trj] )[*] c:\\windows\\system32\\86.exe - [B]Packed.Win32.Krap.ig[/B] ( DrWEB: BackDoor.Ddoser.131, BitDefender: Gen:Trojan.Heur.RP.emW@amv7R3cG, NOD32: IRC/SdBot trojan, AVAST4: Win32:Downloader-FLZ [Trj] )[/LIST][/LIST]