Сделайте лог полного сканирования [url=http://virusinfo.info/showthread.php?t=53070]MBAM[/url]
Printable View
Сделайте лог полного сканирования [url=http://virusinfo.info/showthread.php?t=53070]MBAM[/url]
Вот сделал отчет как вы и сказали.
- [URL="http://virusinfo.info/showpost.php?p=493584&postcount=2"]удалите[/URL] в [B]MBAM[/B]
[CODE]
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP126\A0085922.exe (Backdoor.Bot) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP126\A0086035.exe (Trojan.Genome) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP126\A0085924.exe (Trojan.Genome) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP126\A0086034.exe (Trojan.Genome) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086269.exe (Backdoor.Bot) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086380.exe (Trojan.Genome) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086271.exe (Trojan.Genome) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086379.exe (Trojan.Genome) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086763.exe (Backdoor.Bot) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086892.exe (Trojan.Genome) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086765.exe (Trojan.Genome) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086891.exe (Trojan.Genome) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0087749.exe (Backdoor.Bot) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0087751.exe (Trojan.Genome) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0087924.exe (Trojan.Genome) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0087925.exe (Trojan.Genome) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP129\A0088193.exe (Backdoor.Bot) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP129\A0088195.exe (Trojan.Genome) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP129\A0088303.exe (Trojan.Genome) -> No action taken.
e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP129\A0088304.exe (Trojan.Genome) -> No action taken.
[/CODE]
- [URL="http://virusinfo.info/showthread.php?t=7239"]Выполните скрипт в AVZ[/URL]
[CODE]
begin
DeleteFileMask(GetAVZDirectory + 'Quarantine', '*.*', true);
QuarantineFile('c:\WINDOWS\$ntservicepackuninstall$\ctfmon.exe','');
QuarantineFile('e:\Games\gta san andreas\pztrain.exe','');
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.[/CODE]
- Файл [B][COLOR="Red"]quarantine.zip[/COLOR][/B] из папки AVZ загрузите по ссылке [B][COLOR="Red"]Прислать запрошенный карантин[/COLOR][/B] вверху темы
MBAM удалил.
Первый скрипт не удалось выполнить. AVZ ругнулся "Ошибка 'BEGIN' expected в позиции 1:1".
Второй ввыполнил без ошибок. Карантин прислал.
- [URL="http://virusinfo.info/showthread.php?t=7239"]Выполните скрипт в AVZ[/URL]
[CODE]
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFileMask(GetAVZDirectory + 'Quarantine', '*.*', true);
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP126\A0085922.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP126\A0086035.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP126\A0085924.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP126\A0086034.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086269.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086380.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086271.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086379.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086763.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086892.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086765.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086891.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0087749.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0087751.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0087924.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0087925.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP129\A0088193.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP129\A0088195.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP129\A0088303.exe','');
QuarantineFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP129\A0088304.exe','');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP126\A0085922.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP126\A0086035.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP126\A0085924.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP126\A0086034.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086269.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086380.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086271.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086379.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086763.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086892.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086765.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0086891.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0087749.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0087751.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0087924.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP127\A0087925.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP129\A0088193.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP129\A0088195.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP129\A0088303.exe');
DeleteFile('e:\system volume information\_restore{837495c7-c5ab-4ed6-bd4f-da1c236f5a88}\RP129\A0088304.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.[/CODE]
После перезагрузки:
- выполните такой скрипт
[CODE]begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.[/CODE]
- Файл [B][COLOR="Red"]quarantine.zip[/COLOR][/B] из папки AVZ загрузите по ссылке [B][COLOR="Red"]Прислать запрошенный карантин[/COLOR][/B] вверху темы
Первый и второй скрипты выполнил. Карантин тоже прислал.
Что сейчас с проблемой?
Тоже самое всё. Антивирусники не запускаются. Проги не устанавливаются, не могу даже дрова на видео поставить.
Сделайте лог [url="http://virusinfo.info/showpost.php?p=493610&postcount=1"]ComboFix[/url]
Статистика проведенного лечения:
[LIST][*]Получено карантинов: [B]3[/B][*]Обработано файлов: [B]67[/B][*]В ходе лечения вредоносные программы в карантинах не обнаружены[/LIST]