Выполните скрипт в AVZ:
Код:
begin
TerminateProcessByName('c:\users\Алексей\appdata\roaming\vopackage\vosrv.exe');
TerminateProcessByName('c:\program files (x86)\appenable\updateappenable.exe');
TerminateProcessByName('C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe');
TerminateProcessByName('C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe');
TerminateProcessByName('C:\Program Files (x86)\AppEnable\bin\AppEnable.PurBrowse64.exe');
TerminateProcessByName('C:\Program Files (x86)\AppEnable\bin\AppEnable.BrowserAdapter64.exe');
QuarantineFile('C:\Program Files (x86)\AppEnable\bin\utilAppEnable.exe', '');
QuarantineFile('C:\Program Files (x86)\oTweak\SystemBoosterPro\SystemBoosterPro.exe', '');
QuarantineFile('C:\Program Files (x86)\baidu\BindEx.exe', '');
QuarantineFile('C:\Windows\system32\drivers\{c06d4fbe-280b-4167-ade0-b7e3d262b0b1}Gw64.sys', '');
QuarantineFile('c:\users\Алексей\appdata\roaming\vopackage\vosrv.exe', '');
QuarantineFile('c:\program files (x86)\appenable\updateappenable.exe', '');
QuarantineFile('C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe', '');
QuarantineFile('C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe', '');
QuarantineFile('C:\Program Files (x86)\AppEnable\bin\AppEnable.PurBrowse64.exe', '');
QuarantineFile('C:\Program Files (x86)\AppEnable\bin\AppEnable.BrowserAdapter64.exe', '');
DeleteFile('C:\Program Files (x86)\AppEnable\bin\AppEnable.BrowserAdapter64.exe', '32');
DeleteFile('C:\Program Files (x86)\AppEnable\bin\AppEnable.PurBrowse64.exe', '32');
DeleteFile('C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe', '32');
DeleteFile('C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe', '32');
DeleteFile('c:\program files (x86)\appenable\updateappenable.exe', '32');
DeleteFile('c:\users\Алексей\appdata\roaming\vopackage\vosrv.exe', '32');
DeleteFile('C:\Windows\system32\drivers\{c06d4fbe-280b-4167-ade0-b7e3d262b0b1}Gw64.sys', '32');
DeleteFile('C:\Windows\Tasks\APSnotifierPP1.job', '64');
DeleteFile('C:\Windows\Tasks\APSnotifierPP2.job', '64');
DeleteFile('C:\Windows\Tasks\APSnotifierPP3.job', '64');
DeleteFile('C:\Windows\system32\Tasks\APSnotifierPP1', '64');
DeleteFile('C:\Windows\system32\Tasks\APSnotifierPP2', '64');
DeleteFile('C:\Windows\system32\Tasks\APSnotifierPP3', '64');
DeleteFile('C:\Windows\system32\Tasks\ReimageUpdater', '64');
DeleteFile('C:\Windows\system32\Tasks\Reimage Reminder', '64');
DeleteFile('C:\Program Files (x86)\baidu\BindEx.exe', '32');
DeleteFile('C:\Program Files (x86)\AppEnable\bin\utilAppEnable.exe', '32');
DeleteService('{efe93952-e041-4e49-a1cc-461436cf69d0}Gw64');
DeleteService('{d844ac65-f5bb-442d-922f-0cfb5ccefb0c}Gw64');
DeleteService('{c5db642e-a4dc-48dc-a9f5-088bcf85b719}Gw64');
DeleteService('{820a714f-c526-4777-8e87-e9d6612e0938}Gw64');
DeleteService('{55bbc577-fb0b-4e77-8a51-e033716a9ead}Gw64');
DeleteService('{2fb2b93a-d824-4963-962b-e98da201096d}Gw64');
DeleteService('{150ca330-afd5-4527-99bc-b3ce918cea60}Gw64');
DeleteService('{128614e8-07dd-4e11-b9ec-ca2c14f812c5}Gw64');
DeleteService('{c06d4fbe-280b-4167-ade0-b7e3d262b0b1}Gw64');
DeleteFileMask('C:\Program Files (x86)\AppEnable', '*', true);
DeleteFileMask('C:\Program Files (x86)\baidu', '*', true);
DeleteFileMask('c:\users\Алексей\appdata\roaming\vopackage', '*', true);
DeleteFileMask('C:\Program Files\Reimage', '*', true);
DeleteDirectory('C:\Program Files (x86)\AppEnable');
DeleteDirectory('C:\Program Files (x86)\baidu');
DeleteDirectory('c:\users\Алексей\appdata\roaming\vopackage');
DeleteDirectory('C:\Program Files\Reimage');
DelBHO('{23d4646c-263a-4e2d-a08c-6c704557973d}');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'pcket_x86');
RegKeyParamDel('HKEY_CURRENT_USER', 'Software\Microsoft\Windows\CurrentVersion\Run', 'DriverUpdaterPro');
ExecuteSysClean;
ExecuteRepair(2);
ExecuteRepair(4);
ExecuteWizard('SCU', 2, 2, true);
RebootWindows(true);
end.
Компьютер перезагрузится.
Выполните в AVZ скрипт:
Код:
begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.
В папке с AVZ появится архив карантина quarantine.zip, отправьте этот файл по ссылке "Прислать запрошенный карантин" над над первым сообщением в теме.
Выполните 2-й стандартный скрипт в AVZ и прикрепите к своему следующему сообщению файл virusinfo_syscheck.zip.
Сделайте лог AdwCleaner (by Xplode).
Сделайте лог CheckBrowserLnk.