Бронток, ехе-папки

[idmail]

Здравствуйте

Расплодились exe-шные папки, нет менюшки "Свойства папки", в MSIE выскакивает окошко, по видимому от автора бронтока

Буду признателен за помощь.

[Гриша]

Выполните скрипт:

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\WINNT\system32\01.tmp','');       
 DeleteService('zrxnxcy');
 DeleteService('zfvewaj');
 DeleteService('zeqrgkgrn');
 DeleteService('zeityk');
 DeleteService('zdextfggf');
 DeleteService('yrtkp');
 DeleteService('xzbxyic');
 DeleteService('xydlbxq');
 DeleteService('xuujl');
 DeleteService('xrnwsh');
 DeleteService('xounm');
 DeleteService('xeffh');
 DeleteService('wxvsgaqyo');
 DeleteService('wehzsssg');
 DeleteService('vwwunerwa');
 DeleteService('vwdbhfgpp');
 DeleteService('vtfuffh');
 DeleteService('vibmtzsi');
 DeleteService('vfvxrjk');
 DeleteService('vddfpzg');
 DeleteService('utynhlry');
 DeleteService('upqogugu');
 DeleteService('ulptu');
 DeleteService('uditvtg');
 DeleteService('ubjjjkq');
 DeleteService('ubhxcwys');
 DeleteService('txvnjkgy');
 DeleteService('tecqejjq');
 DeleteService('tbyssp');
 DeleteService('szmbpabkr');
 DeleteService('sawvrfy');
 DeleteService('satjkvtrw');
 DeleteService('rydzbv');
 DeleteService('rpqiulpa');
 DeleteService('rgisfbgh');
 DeleteService('raritxc');
 DeleteService('qxkeatupq');
 DeleteService('qrrjrexx');
 DeleteService('qrfvikess');
 DeleteService('qgfky');
 DeleteService('pzumt');
 DeleteService('pxwqo');
 DeleteService('pvlgkjj');
 DeleteService('ojzykq');
 DeleteService('ojstwmtl');
 DeleteService('nsalfx');
 DeleteService('nmdnef');
 DeleteService('niapo');
 DeleteService('ngiasfuzw');
 DeleteService('mwogfadgp');
 DeleteService('mwkyzuuj');
 DeleteService('mgrdf');
 DeleteService('meofporvv');
 DeleteService('lppcqqq');
 DeleteService('lnozm');
 DeleteService('lngkwfor');
 DeleteService('lmvbj');
 DeleteService('lkmgnuvgr');
 DeleteService('krmvvko');
 DeleteService('krgbcmmbi');
 DeleteService('knjbufms');
 DeleteService('kiwazhu');
 DeleteService('kgxzvmaz');
 DeleteService('kftugxnb');
 DeleteService('kfrihcqs');
 DeleteService('jrmkhu');
 DeleteService('jblcvm');
 DeleteService('iyjrxcld');
 DeleteService('itxdvlj');
 DeleteService('ithvxnap');
 DeleteService('itgabgb');
 DeleteService('ircqrmtjv');
 DeleteService('iqbrkrzq');
 DeleteService('iakbflm');
 DeleteService('hzzxk');
 DeleteService('hxepplnx');
 DeleteService('htoxwau');
 DeleteService('hsjpkddyg');
 DeleteService('hsbxj');
 DeleteService('hqfnqpo');
 DeleteService('gwigeo');
 DeleteService('gunmzthh');
 DeleteService('grwftiuf');
 DeleteService('gnzgdn');
 DeleteService('gmgwonteo');
 DeleteService('gkijrbvpi');
 DeleteService('fjnwpvmn');
 DeleteService('ficaicdnc');
 DeleteService('fhegulpi');
 DeleteService('emskxg');
 DeleteService('ekqsnzlq');
 DeleteService('dxobpf');
 DeleteService('dxjsxcda');
 DeleteService('dxacfbrjc');
 DeleteService('dpsrc');
 DeleteService('djtjzmu');
 DeleteService('dfjetno');
 DeleteService('cunchif');
 DeleteService('cmfjvlnj');
 DeleteService('cgoco');
 DeleteService('btfdsqcv');
 DeleteService('bljem');
 DeleteService('beodfbs');
 DeleteService('bdlttenfx');
 DeleteService('bcdmbxvwm');
 DeleteService('avhjfdaf');
 DeleteService('aeunsra');
 DeleteService('aczsyqfh');
 DeleteFile('C:\WINNT\system32\01.tmp');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(6);
ExecuteRepair(11);
ExecuteRepair(16);      
RebootWindows(true);
end.

Пришлите карантин по правилам и повторите логи...

[idmail]

В карантине было пусто, посему только логи.

[Гриша]

Выполните скрипт:

begin
SetAVZGuardStatus(True);
 DeleteService('mwkyzuuj');
 DeleteFile('C:\WINNT\system32\06.tmp');
BC_ImportDeletedList;
ExecuteSysClean;
BC_DeleteSvc('mwkyzuuj');
BC_Activate;
ExecuteRepair(16);
RebootWindows(true);
end.

Повторите пункт 2 диагностики...

[idmail]

Выкладываю лог после П.2 диагностики

[Гриша]

В логах чисто, установите SP3+all updates...

[idmail]

Спасибо за помощь