• Выполните скрипт
AVZ
Перед выполнением скрипта отключитесь от сети и отключите защитное ПО (антивирус, файрволл)!
AVZ, меню "Файл ->
Выполнить скрипт" -> Скопировать ниже написанный
скрипт -> Нажать кнопку "
Запустить".
Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(true);
QuarantineFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp','');
QuarantineFile('d:\autorun.inf','');
QuarantineFile('d:\wumbdu.exe','');
DeleteFile('d:\wumbdu.exe');
DeleteFile('d:\autorun.inf');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\appdata\local\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\documents and settings\moonis\local settings\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\appdata\local\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\appdata\local\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\appdata\local\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\appdata\local\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\local settings\application data\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\local settings\application data\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\local settings\application data\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\local settings\application data\temp\~df9d3d06f91b2bd8c5.tmp');
DeleteFile('c:\users\moonis\local settings\temp\~df045e01d289a4ad9b.tmp');
DeleteFile('c:\users\moonis\local settings\temp\~df9194ffd9aa190f4d.tmp');
DeleteFile('c:\users\moonis\local settings\temp\~df9d3d06f91b2bd8c5.tmp');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
После выполнения скрипта компьютер перезагрузится!
После перезагрузки выполните такой скрипт
AVZ, меню "Файл ->
Выполнить скрипт" -> Скопировать ниже написанный
скрипт -> Нажать кнопку "
Запустить".
Код:
begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.
В результате выполнения скрипта будет сформирован карантин.Отправьте
c:\quarantine.zip при помощи
этой формы
Повторите логи
AVZ + подготовьте лог
RSIT
Скачайте
Malwarebytes' Anti-Malware или с
зеркала, установите, обновите базы, выберите "
Perform Full Scan", нажмите "
Scan", после сканирования -
Ok -
Show Results (показать результаты) - Откройте лог и скопируйте в блокнот и прикрепите его к следующему посту.
