Download CCleaner (pls. search with google the best location for you) and install it.
Pls. switch off:
- PC from internet
-system restore
-antivirus program & firewall
Execute script
Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
ClearHostsFile;
TerminateProcessByName('c:\windows\dc.exe');
TerminateProcessByName('c:\windows\sviq.exe');
TerminateProcessByName('c:\windows\system\fun.exe');
QuarantineFile('C:\WINDOWS\SVIQ.EXE','');
QuarantineFile('C:\WINDOWS\dc.exe','');
QuarantineFile('C:\WINDOWS\inf\Other.exe','');
QuarantineFile('C:\WINDOWS\system32\config\Win.exe','');
QuarantineFile('C:\WINDOWS\system\Fun.exe','');
QuarantineFile('C:\WINDOWS\system32\WinSit.exe','');
QuarantineFile('c:\windows\sviq.exe','');
QuarantineFile('c:\windows\system\fun.exe','');
QuarantineFile('c:\windows\dc.exe','');
DeleteFile('c:\windows\dc.exe');
DeleteFile('c:\windows\system\fun.exe');
DeleteFile('c:\windows\sviq.exe');
DeleteFile('C:\WINDOWS\system32\WinSit.exe');
DeleteFile('C:\WINDOWS\system\Fun.exe');
DeleteFile('C:\WINDOWS\system32\config\Win.exe');
DeleteFile('C:\WINDOWS\inf\Other.exe');
DeleteFile('C:\WINDOWS\dc.exe');
DeleteFile('C:\WINDOWS\SVIQ.EXE');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
After reboot start CCleaner and clean all Temp-Maps & Cache of all the browsers, clean Recycler.
Start Internet Explorer
Close all other programs, esp. antivirus/firewall!!!
Repeat 3 log files in accordance with our rules : http://virusinfo.info/showthread.php?t=9184 .
Switch your antivirus/firewall on.
Go on-line.
Attach 3 new logs to your next message.