Win32 Virtumonde + Win32 PrivacyRemover M64

[Bucha]

Здравствуйте! Я уже видел темы про ту же заразу как у меня, но даже не представляю себе что такое скрипты и логи, короче, ничего в этом не понимаю...
Не могли бы Вы объяснить мне, ламмеру, что да как надо делать)))) я AVZ скачал, а вот что прописывать и присылать вам - без понятия... Спасибо! Не обессудьте

[Rene-gad]

Читайте вслух: http://virusinfo.info/showthread.php?t=1235
Какая Вам разница- в правилах или в сообщении прочитать?

[Bucha]

карантин

[V_Bond]

выполните скрипт ...

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteService('Winyf61');
 DeleteService('Winye62');
 DeleteService('Winye16');
 DeleteService('Winxf06');
 DeleteService('Winxd62');
 DeleteService('Winxd51');
 DeleteService('Winwc62');
 DeleteService('Winwc38');
 DeleteService('Winwc27');
 DeleteService('Winvb62');
 DeleteService('Winvb50');
 DeleteService('Winub27');
 DeleteService('Winua26');
 DeleteService('Winty61');
 DeleteService('Winty51');
 DeleteService('Winty16');
 DeleteService('Winsx38');
 DeleteService('Winqv51');
 DeleteService('Winpu27');
 DeleteService('Winou62');
 DeleteService('Winns37');
 DeleteService('Winqv38');
 DeleteService('Winot62');
 DeleteService('Winot51');
 DeleteService('Winot40');
 DeleteService('Winns27');
 DeleteService('Winmr83');
 DeleteService('Winmr38');
 DeleteService('Winmr05');
 DeleteService('Winlr26');
 DeleteService('Winlq05');
 DeleteService('Winjo27');
 DeleteService('Winjo16');
 DeleteService('Winio16');
 DeleteService('Winin84');
 DeleteService('Winfk16');
 DeleteService('Wingl40');
 DeleteService('Wingl38');
 DeleteService('Winfk84');
 DeleteService('Winfk05');
 DeleteService('Winek73');
 DeleteService('Winej84');
 DeleteService('Winej40');
 DeleteService('Windi51');
 DeleteService('Winci62');
 DeleteService('Winch72');
 DeleteService('Winch40');
 DeleteService('Winch16');
 DeleteService('Winbg73');
 DeleteService('Winbg62');
 DeleteService('Winbg51');
 DeleteService('Winbg50');
 DeleteService('Winag40');
 DeleteService('Winaf84');
 DeleteService('Winaf27');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winaf27.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winaf84.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winag40.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winbg50.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winbg51.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winbg62.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winbg73.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winch16.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winch72.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winci62.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Windi51.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winej40.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winej84.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winek73.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winfk05.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winfk16.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winch40.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winfk84.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Wingl38.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Wingl40.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winhm40.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winhm73.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winin84.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winio16.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winjo16.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winjo27.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winlq05.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winlr26.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winmr05.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winmr38.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winmr83.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winns27.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winns37.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winot40.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winot51.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winot62.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winou62.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winpu27.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winqv38.sys');
 DeleteFile('Winty16.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winty61.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winua26.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winub27.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winvb50.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winvb62.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winwc27.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winwc38.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winwc62.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winxd51.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winxd62.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winxf06.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winye16.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winye62.sys');
 DeleteFile('C:\WINDOWS\System32\Drivers\Winyf61.sys');
 DeleteFile('C:\WINDOWS\system32\blphccssj0e57a.scr');
 DeleteFile('WinCtrl32.dll');
BC_ImportDeletedList;
ExecuteSysClean;
ExecuteRepair(5);
ExecuteRepair(6);
ExecuteRepair(8);
BC_Activate;
RebootWindows(true);
end.

пришлите карантин согласно приложения 3 правил ...
повторите логи ...