Помогите удалить вирус

[markov1017]

подхватил китайский вирус баиду скачав читы кс пытался их удалить , но безрезультатно , комп тормозит , помогите решить данную проблему.все необходтмое сделал . спасибо.

[Info_bot]

Уважаемый(ая) LoginzaID: 85944673, спасибо за обращение на наш форум!

Удаление вирусов - абсолютно бесплатная услуга на VirusInfo.Info. Хелперы в самое ближайшее время ответят на Ваш запрос. Для оказания помощи необходимо предоставить логи сканирования утилитами АВЗ и HiJackThis, подробнее можно прочитать в правилах оформления запроса о помощи.

Если наш сайт окажется полезен Вам и у Вас будет такая возможность - пожалуйста поддержите проект.

[markov1017]

Помогите удалить вирус
подхватил китайский вирус баиду скачав читы кс пытался их удалить , но безрезультатно , комп тормозит , помогите решить данную проблему.все необходтмое сделал . спасибо.

[thyrex]

Выполните скрипт в AVZ

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
 then
  begin
   SearchRootkit(true, true);
   SetAVZGuardStatus(True);
  end;
QuarantineFile('E:\Program Files\xtab\cmdshell.exe','');
 QuarantineFile('E:\Program Files\xtab\browerwatchff.dll','');
 QuarantineFile('E:\Program Files\xtab\browerwatchch.dll','');
 DelBHO('{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}');
 QuarantineFile('E:\Program Files\XTab\SupTab.dll','');
 QuarantineFile('E:\Program Files\punto.bat','');
 QuarantineFile('E:\Program Files\Google\chrome.bat','');
 QuarantineFile('E:\Program Files\Application Assistance\ap.exe','');
 QuarantineFile('E:\IEXPLORE.bat','');
 QuarantineFile('E:\Documents and Settings\Admin\Local Settings\Application Data\gmsd_ru_219\upgmsd_ru_219.exe','');
 QuarantineFile('E:\Documents and Settings\Admin\Local Settings\Application Data\Yandex\browser.bat','');
 QuarantineFile('E:\Documents and Settings\Admin\Application Data\eTranslator\eTranslator.exe','');
 DeleteService('innfd_1_10_0_14');
 SetServiceStart('BdSandBox', 4);
 DeleteService('BdSandBox');
 SetServiceStart('BDSafeBrowser', 4);
 DeleteService('BDSafeBrowser');
 SetServiceStart('BDMWrench', 4);
 DeleteService('BDMWrench');
 SetServiceStart('BDMNetMon', 4);
 DeleteService('BDMNetMon');
 SetServiceStart('BDEnhanceBoost', 4);
 DeleteService('BDEnhanceBoost');
 SetServiceStart('BDDefense', 4);
 DeleteService('BDDefense');
 SetServiceStart('BDArKit', 4);
 DeleteService('BDArKit');
 SetServiceStart('bd0003', 4);
 DeleteService('bd0003');
 SetServiceStart('bd0002', 4);
 DeleteService('bd0002');
 SetServiceStart('bd0001', 4);
 DeleteService('bd0001');
 QuarantineFile('E:\Program Files\Infonaut_1.10.0.14\Service\insvc.exe','');
 DeleteService('insvc_1.10.0.14');
 SetServiceStart('WindowsMangerProtect', 4);
 DeleteService('WindowsMangerProtect');
 SetServiceStart('nitozyku', 4);
 DeleteService('nitozyku');
 SetServiceStart('detenepe', 4);
 DeleteService('detenepe');
 SetServiceStart('cuzovyli', 4);
 DeleteService('cuzovyli');
 SetServiceStart('bicebewy', 4);
 DeleteService('bicebewy');
 SetServiceStart('BaiduHips', 4);
 DeleteService('BaiduHips');
 SetServiceStart('BDKVRTP', 4);
 DeleteService('BDKVRTP');
 SetServiceStart('BDMRTP', 4);
 DeleteService('BDMRTP');
 TerminateProcessByName('e:\documents and settings\admin\local settings\application data\35613165-1429639147-3932-3036-705ab604ac1a\snsq803.tmp');
 QuarantineFile('e:\documents and settings\admin\local settings\application data\35613165-1429639147-3932-3036-705ab604ac1a\snsq803.tmp','');
 TerminateProcessByName('e:\documents and settings\all users\application data\windowsmangerprotect\protectwindowsmanager.exe');
 QuarantineFile('e:\documents and settings\all users\application data\windowsmangerprotect\protectwindowsmanager.exe','');
 TerminateProcessByName('e:\documents and settings\admin\application data\35613165-1429624521-3932-3036-705ab604ac1a\nsf790.tmpfs');
 QuarantineFile('e:\documents and settings\admin\application data\35613165-1429624521-3932-3036-705ab604ac1a\nsf790.tmpfs','');
 TerminateProcessByName('e:\documents and settings\admin\application data\35613165-1429624521-3932-3036-705ab604ac1a\jnsq7a4.tmp');
 QuarantineFile('e:\documents and settings\admin\application data\35613165-1429624521-3932-3036-705ab604ac1a\jnsq7a4.tmp','');
 TerminateProcessByName('e:\documents and settings\admin\local settings\application data\35613165-1429639131-3932-3036-705ab604ac1a\cnsq7f5.tmp');
 QuarantineFile('e:\documents and settings\admin\local settings\application data\35613165-1429639131-3932-3036-705ab604ac1a\cnsq7f5.tmp','');
 TerminateProcessByName('e:\program files\baidu\baidusd\3.0.0.4605\baidusdtray.exe');
 TerminateProcessByName('e:\program files\baidu\baidusd\3.0.0.4605\baidusdsvc.exe');
 TerminateProcessByName('e:\program files\common files\baidu\baiduhips\1.2.0.751\baiduhips.exe');
 TerminateProcessByName('e:\program files\baidu\baiduan\4.0.0.5166\baiduansvc.exe');
 TerminateProcessByName('e:\program files\baidu\baiduan\4.0.0.5166\baiduantray.exe');
 DeleteFile('e:\program files\baidu\baiduan\4.0.0.5166\baiduansvc.exe','32');
 DeleteFile('e:\program files\baidu\baiduan\4.0.0.5166\baiduantray.exe','32');
 DeleteFile('e:\program files\common files\baidu\baiduhips\1.2.0.751\baiduhips.exe','32');
 DeleteFile('e:\program files\baidu\baidusd\3.0.0.4605\baidusdsvc.exe','32');
 DeleteFile('e:\program files\baidu\baidusd\3.0.0.4605\baidusdtray.exe','32');
 DeleteFile('e:\documents and settings\admin\local settings\application data\35613165-1429639131-3932-3036-705ab604ac1a\cnsq7f5.tmp','32');
 DeleteFile('e:\documents and settings\admin\application data\35613165-1429624521-3932-3036-705ab604ac1a\jnsq7a4.tmp','32');
 DeleteFile('e:\documents and settings\admin\application data\35613165-1429624521-3932-3036-705ab604ac1a\nsf790.tmpfs','32');
 DeleteFile('e:\documents and settings\all users\application data\windowsmangerprotect\protectwindowsmanager.exe','32');
 DeleteFile('e:\documents and settings\admin\local settings\application data\35613165-1429639147-3932-3036-705ab604ac1a\snsq803.tmp','32');
 DeleteFile('E:\Documents and Settings\All Users\Application Data\Baidu\SDWS\tmpFiles\BDLogicUtils.dll','32');
 DeleteFile('E:\Documents and Settings\All Users\Application Data\Baidu\SDWS\tmpFiles\BDMNet.dll','32');
 DeleteFile('E:\Documents and Settings\All Users\Application Data\Baidu\SDWS\tmpFiles\BDMReport.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\ad.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\BDLogicUtils.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\bdmantivirus\BDKitUtils.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\bdmantivirus\BDMAVCached.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\bdmantivirus\BDMAVEng.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\BDMCommon.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\BDMDbSqlite.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\BDMFrameWork.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\BDMHeartBeat.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\BDMNet.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\BDMReport.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\BDMScriptVM.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\BDMSkin.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\BDMUpdate.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\cjson.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\DriverManager.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\EnhanceBoost.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\FTSOManager\BDMNetMonMgrDll.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\FTSOManager\BDMProcessRunningTime.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\FTSOManager\BDMSOLiveAccDataMgr.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\FTSOManager\BDMSOLiveAccEngine.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\FTSOManager\BDMSOLiveAccStrategyMgr.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\FTSOManager\SysAccMgrDll.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\libcurl.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\libeay32.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\LuaInvoker.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\Plugins\bderrordetectplugins\BDErrorDetect.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\Plugins\BDMPatcherPlugins\BDMConnect.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\plugins\bdmsusplugins\BDMNetMonSusPlugin.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\plugins\bdmsusplugins\BDMSOAccSusPlugin.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\Plugins\bdmtrayplugins\BDMAccount.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\Plugins\bdmtrayplugins\BDMSmartTip.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\Plugins\bdmtrayplugins\BDMSOAccTrayPlugin.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\Plugins\bdmtrayplugins\BDMSOCleanerTrayPlugin.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\Plugins\BDMTrayPlugins\BDMSusPlugin.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\plugins\RTPPlugins\BDMSOAccServicePlugin.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\plugins\RTPPlugins\HipsClient.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\ad.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BAV\BavArchive.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BAV\BavCommon.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BAV\BavEngine.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BAV\BavFrame.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BAV\BavOle.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BAV\BavScanH.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BAV\BavScanM.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BAV\BavScanV.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BAV\BavUnpack.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BDKVDeskBand.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BDLogicUtils.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\bdmantivirus\BDKitUtils.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\bdmantivirus\BDMAVCached.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\bdmantivirus\BDMAVEng.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\bdmantivirus\BDMPerfMon.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\bdmantivirus\BDUDiskGuard.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\bdmantivirus\bduf.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\bdmantivirus\TrustAndIso.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BDMAVE.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BDMCommon.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BDMDbSqlite.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BDMFrameWork.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BDMNet.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BDMReport.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BdSandCtl.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\DriverManager.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\plugins\bdkvrtpplugins\FileMon.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\plugins\bdkvrtpplugins\HIPSClient.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\plugins\bdkvrtpplugins\PrivacyProtect.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\Plugins\bdkvtrayplugins\BDDownLoadProtectPlugin.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\Plugins\bdkvtrayplugins\BDKVRmvDevPlugin.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\Plugins\bdkvtrayplugins\BDKVTrayTipsPlugin.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\skin_engine.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\websafe\DllInject.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\websafe\WebMonHook.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\websafe\websafe.dll','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\websafe\WebSafePlugin.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\ad.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\BaiduHipsBusiness.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\BaiduHipsCore.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\BaiduPrevUIn.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\bd0001.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\BDConfig.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\BDLogicUtils.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\bdmantivirus\BDKitUtils.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\BDMAVCached.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\BDMAVEng.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\BDMBase.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\BDMDownload.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\BDMFrameWork.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\BDMNet.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\BDMReport.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\BDMStringUtils.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\BDMTinyXml.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\DriverManager.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\TrustAndIso.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduProtect1.3\1.3.0.622\bdsg0001.dll','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduProtect1.3\1.3.0.622\SafeExplorer.dll','32');
 DeleteFile('E:\WINDOWS\system32\DRIVERS\bd0001.sys','32');
 DeleteFile('E:\WINDOWS\system32\DRIVERS\bd0002.sys','32');
 DeleteFile('E:\WINDOWS\system32\DRIVERS\bd0003.sys','32');
 DeleteFile('E:\WINDOWS\system32\DRIVERS\bd0004.sys','32');
 DeleteFile('E:\WINDOWS\system32\DRIVERS\BDArKit.sys','32');
 DeleteFile('E:\WINDOWS\system32\drivers\BDDefense.sys','32');
 DeleteFile('E:\WINDOWS\system32\DRIVERS\BDEnhanceBoost.sys','32');
 DeleteFile('E:\WINDOWS\system32\DRIVERS\BDMNetMon.sys','32');
 DeleteFile('E:\WINDOWS\system32\DRIVERS\BDMWrench.sys','32');
 DeleteFile('E:\WINDOWS\system32\drivers\BDSafeBrowser.sys','32');
 DeleteFile('E:\WINDOWS\system32\DRIVERS\BdSandBox.sys','32');
 DeleteFile('E:\Program Files\Common Files\Baidu\BaiduHips\1.2.0.751\BaiduHips.exe','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BaiduSdSvc.exe','32');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\BaiduAnSvc.exe','32');
 DeleteFile('E:\Program Files\Infonaut_1.10.0.14\Service\insvc.exe','32');
 DeleteFile('E:\Documents and Settings\Admin\Application Data\eTranslator\eTranslator.exe','32');
 RegKeyParamDel('HKEY_CURRENT_USER','Software\Microsoft\Windows\CurrentVersion\Run','eTranslator Automatic Update');
 DeleteFile('E:\Documents and Settings\Admin\Local Settings\Application Data\Yandex\browser.bat','32');
 DeleteFile('E:\Documents and Settings\Admin\Local Settings\Application Data\gmsd_ru_219\upgmsd_ru_219.exe','32');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','upgmsd_ru_219.exe');
 DeleteFile('E:\IEXPLORE.bat','32');
 DeleteFile('E:\Program Files\Application Assistance\ap.exe','32');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','ap');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','BaiduAnTray');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','baidusdTray');
 DeleteFile('E:\Program Files\Baidu\BaiduAn\4.0.0.5166\BaiduAnTray.exe','32');
 DeleteFile('E:\Program Files\Baidu\BaiduSd\3.0.0.4605\BaiduSdTray.exe','32');
 DeleteFile('E:\Program Files\Google\chrome.bat','32');
 DeleteFile('E:\Program Files\punto.bat','32');
 DeleteFile('E:\Program Files\XTab\SupTab.dll','32');
 DeleteFile('E:\WINDOWS\Tasks\Soft installer.job','32');
 DeleteFile('E:\Documents and Settings\Admin\Local Settings\Application Data\Host installer\2087097322_monster.exe','32');
 DeleteFile('E:\Program Files\xtab\browerwatchch.dll','32');
 DeleteFile('E:\Program Files\xtab\browerwatchff.dll','32');
 DeleteFile('E:\Program Files\xtab\cmdshell.exe','32');
 BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.

Компьютер перезагрузится.

Пришлите карантин согласно Приложения 2 правил по красной ссылке Прислать запрошенный карантин вверху темы

Сделайте новые логи по правилам

Сделайте лог CheckBrowserLnk