Windows security alert, достал, убить!!!

[exceptforme]

Windows security alert, достал, убить!!!

[V_Bond]

выполните скрипт ....

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\WINDOWS\system32\amvo0.dll','');
 DelBHO('{2318C2B1-4965-11d4-9B18-009027A5CD4F}');
 DelBHO('{AF69DE43-7D58-4638-B6FA-CE66B5AD205D}');
 DelBHO('{AA58ED58-01DD-4d91-8333-CF10577473F7}');
 DelBHO('{903AD98D-8A91-4FBB-B5E1-4FFCA9003E6A}');
 QuarantineFile('c:\huadio.tmp','');
 QuarantineFile('C:\WINDOWS\vbgtorfd.dll','');
 QuarantineFile('C:\WINDOWS\system32\sdwjsdit.exe','');
 QuarantineFile('C:\WINDOWS\qvdntlmw.dll','');
 QuarantineFile('C:\WINDOWS\kdftlboeorn.dll','');
 QuarantineFile('C:\WINDOWS\dwnrpofk.dll','');
 QuarantineFile('c:\windows\system32\sdwjsdit.exe','');
 QuarantineFile('c:\documents and settings\all users\application data\qhojovyh\krghypgx.exe','');
 DeleteFile('c:\documents and settings\all users\application data\qhojovyh\krghypgx.exe');
 DeleteFile('c:\windows\system32\sdwjsdit.exe');
 DeleteFile('C:\WINDOWS\dwnrpofk.dll');
 DeleteFile('C:\WINDOWS\kdftlboeorn.dll');
 DeleteFile('C:\WINDOWS\qvdntlmw.dll');
 DeleteFile('C:\WINDOWS\system32\sdwjsdit.exe');
 DeleteFile('C:\WINDOWS\vbgtorfd.dll');
 DeleteFile('C:\WINDOWS\system32\amvo0.dll');
 DeleteFile('C:\WINDOWS\norlatmx.exe');
 ExecuteRepair(1);
ExecuteRepair(11);
ExecuteRepair(6);
ExecuteRepair(8);
ExecuteRepair(9);
ExecuteRepair(16);
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

пришлите карантин согласно приложения 3 правил ....
повторите логи ...

[CyberHelper]

Статистика проведенного лечения:

• Получено карантинов: 1
• Обработано файлов: 10
• В ходе лечения обнаружены вредоносные программы:
  
  1. c:\\documents and settings\\all users\\application data\\qhojovyh\\krghypgx.exe - Trojan.Win32.Agent.jae (DrWEB: Trojan.DownLoader.57350)
  2. c:\\documents and settings\\user\\local settings\\temporary internet files\\content.ie5\\7ggim3jd\\setup504[1].exe - not-a-virus:FraudTool.Win32.MalWarrior.g (DrWEB: Trojan.DownLoader.57352)
  3. c:\\windows\\dwnrpofk.dll - not-a-virus:AdWare.Win32.Vapsup.dbv (DrWEB: Trojan.Popuper)
  4. c:\\windows\\kdftlboeorn.dll - not-a-virus:AdWare.Win32.Vapsup.dcf (DrWEB: Adware.Supa.14)
  5. c:\\windows\\norlatmx.exe - not-a-virus:AdWare.Win32.Vapsup.dce (DrWEB: Trojan.Popuper)
  6. c:\\windows\\qvdntlmw.dll - not-a-virus:AdWare.Win32.Vapsup.dcd (DrWEB: Trojan.Popuper)
  7. c:\\windows\\system32\\amvo0.dll - Trojan-GameThief.Win32.OnLineGames.vum (DrWEB: Trojan.PWS.Wsgame.3604)
  8. c:\\windows\\system32\\sdwjsdit.exe - Trojan.Win32.Obfuscated.tm (DrWEB: Trojan.DownLoader.57349)
  9. c:\\windows\\vbgtorfd.dll - not-a-virus:AdWare.Win32.Vapsup.dbz (DrWEB: Trojan.DownLoader.57351)