You should execute the following script at avptool:
Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DelBHO('{7E853D72-626A-48EC-A868-BA8D5E23E045}');
QuarantineFile('csrcs.exe','');
QuarantineFile('brastk.exe','');
QuarantineFile('C:\WINDOWS\System32\csrcs.exe','');
QuarantineFile('C:\WINDOWS\System32\cftm.exe','');
QuarantineFile('c:\windows\system32\cftm.exe','');
QuarantineFile('c:\windows\system32\csrcs.exe','');
DeleteFile('c:\windows\system32\csrcs.exe');
DeleteFile('c:\windows\system32\cftm.exe');
DeleteFile('C:\WINDOWS\System32\csrcs.exe');
DeleteFile('C:\WINDOWS\System32\cftm.exe');
DeleteFile('brastk.exe');
DeleteFile('csrcs.exe');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
Pack ( zip) (with pass 'virus') "Qurantine_AVZ" ( it is subfolder where your avptool exist)
Please upload it by link http://virusinfo.info/upload_virus_eng.php?tid=33942
Repeat log files and attach to your new post..