Please disable System Restore (see Appendix 1 of rules).
Close all programs.
Execute the script:
Код:
begin
SetAVZGuardStatus(True);
RegKeyIntParamWrite('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer','NoDriveTypeAutoRun', 221);
QuarantineFile('C:\Program Files\Systran\4_0\Premium\IEPlugIn.dll','');
QuarantineFile('C:\Program Files\BitComet\tools\BitCometBHO.dll','');
DeleteService('Vfscan');
QuarantineFile('C:\WINDOWS\System32\ntsim.sys','');
DeleteService('InCDFs');
DeleteService('InCDPass');
DeleteService('InCDRm');
QuarantineFile('C:\WINDOWS\system32\Drivers\Winflash.sys','');
DeleteService('PTK SharedAccess-FIGHTERS-297811811');
DeleteService('PTK Scanner-FIGHTERS-297811811');
DeleteService('PTK Live Update-FIGHTERS-297811811');
DeleteService('PTK License-FIGHTERS-297811811');
QuarantineFile('c:\documents and settings\mourad souissi\local settings\application data\cigss.exe','');
DeleteFile('C:\documents and settings\mourad souissi\local settings\application data\cigss.exe');
SetServiceStart('SSDPSRV', 4);
SysCleanAddFile('C:\Program Files\SpywareRemover\SpywareRemover.exe');
CreateQurantineArchive('C:\quarantine.zip');
ExecuteRepair(9);
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
The computer will reboot.
Upload file C:\quarantine.zip, by link Upload quarantined files in the top of this thread.
Do "Collect system information" and attach new avptool_syscheck.zip to the thread.