Hello.
First of all, before efecuting the script you'd better turn off your network connection and disable antivirus monitor. They should be turned on again after the script execution.
Execute this script:
Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('H:\Program Files\Fotonija\Anglonas\Anglonas.exe','');
QuarantineFile('H:\Documents and Settings\The Robert\Start Menu\Programs\Startup\wwwpos32.exe','');
BC_ImportquarantineList;
BC_Activate;
RebootWindows(true);
end.
Keep in mind that this script does not remove anything - it only quarantines suspicious files. After restart, execute the second script:
Код:
begin
createqurantinearchive('c:\quarantine.zip');
end.
Upload the file c:\quarantine.zip via the link http://virusinfo.info/upload_virus_eng.php?tid=72748 as it's described in the app.3 of the rules. The file c:\quarantine.zip should be removed after uploading. And, please, could you make also the log of Hijackthis and attach it here?