Почему не весь лог ?
Вебмани переустанавливали ?
• Скрипт
AVZ.
Выполните скрипт
AVZ. Меню
Файл - Выполнить скрипт, вставляем написаный скрипт - кнопка
Запустить, после выполнения компьютер перезагрузится.
Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('D:\System Volume Information\_restore{3BD9A2CC-5338-450F-91D9-A0F0300A3D76}\RP256\A0079531.pif','');
QuarantineFile('D:\tafa.exe','');
QuarantineFile('C:\deqig.pif','');
QuarantineFile('c:\documents and settings\никита\local settings\temp\00023b78_rar\svchost.pif','');
QuarantineFile('c:\documents and settings\никита\local settings\temp\00147899_rar\svchost.pif','');
QuarantineFile('c:\documents and settings\никита\local settings\temp\0015b83d_rar\svchost.pif','');
QuarantineFile('c:\documents and settings\никита\local settings\temp\0015b85d_rar\svchost.pif','');
QuarantineFile('c:\documents and settings\никита\local settings\temp\0015b89b_rar\svchost.pif','');
QuarantineFile('c:\documents and settings\никита\local settings\temp\0015b8ca_rar\svchost.pif','');
QuarantineFile('c:\documents and settings\никита\local settings\temp\0015b947_rar\svchost.pif','');
QuarantineFile('c:\documents and settings\никита\local settings\temp\0015ba12_rar\svchost.pif','');
QuarantineFile('c:\documents and settings\никита\local settings\temp\0015bb0c_rar\svchost.pif','');
QuarantineFile('c:\documents and settings\никита\local settings\temp\0015bbe7_rar\svchost.pif','');
QuarantineFile('c:\documents and settings\никита\local settings\temp\0015bd00_rar\svchost.pif','');
QuarantineFile('c:\program files\steam\steamapps\common\mafia ii - public demo\pc\mafia2.exe.bak','');
QuarantineFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp256\a0079533.pif','');
QuarantineFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp256\a0079863.pif','');
QuarantineFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp256\a0079998.pif','');
QuarantineFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp256\a0080092.pif','');
QuarantineFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp256\a0081124.pif','');
QuarantineFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp256\a0081238.exe','');
QuarantineFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp257\a0081824.exe','');
QuarantineFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp257\a0081828.exe','');
QuarantineFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp257\a0081835.exe','');
QuarantineFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp257\a0082264.pif','');
QuarantineFile('d:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp256\a0079531.pif','');
QuarantineFile('c:\autorun.inf','');
QuarantineFile('d:\autorun.inf','');
DeleteFile('c:\autorun.inf');
DeleteFile('d:\autorun.inf');
DeleteFile('c:\documents and settings\никита\local settings\temp\00023b78_rar\svchost.pif');
DeleteFile('c:\documents and settings\никита\local settings\temp\00147899_rar\svchost.pif');
DeleteFile('c:\documents and settings\никита\local settings\temp\0015b83d_rar\svchost.pif');
DeleteFile('c:\documents and settings\никита\local settings\temp\0015b85d_rar\svchost.pif');
DeleteFile('c:\documents and settings\никита\local settings\temp\0015b89b_rar\svchost.pif');
DeleteFile('c:\documents and settings\никита\local settings\temp\0015b8ca_rar\svchost.pif');
DeleteFile('c:\documents and settings\никита\local settings\temp\0015b947_rar\svchost.pif');
DeleteFile('c:\documents and settings\никита\local settings\temp\0015ba12_rar\svchost.pif');
DeleteFile('c:\documents and settings\никита\local settings\temp\0015bb0c_rar\svchost.pif');
DeleteFile('c:\documents and settings\никита\local settings\temp\0015bbe7_rar\svchost.pif');
DeleteFile('c:\documents and settings\никита\local settings\temp\0015bd00_rar\svchost.pif');
DeleteFile('c:\program files\steam\steamapps\common\mafia ii - public demo\pc\mafia2.exe.bak');
DeleteFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp256\a0079533.pif');
DeleteFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp256\a0079863.pif');
DeleteFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp256\a0079998.pif');
DeleteFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp256\a0080092.pif');
DeleteFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp256\a0081124.pif');
DeleteFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp256\a0081238.exe');
DeleteFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp257\a0081824.exe');
DeleteFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp257\a0081828.exe');
DeleteFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp257\a0081835.exe');
DeleteFile('c:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp257\a0082264.pif');
DeleteFile('d:\system volume information\_restore{3bd9a2cc-5338-450f-91d9-a0f0300a3d76}\rp256\a0079531.pif');
DeleteFile('C:\deqig.pif');
DeleteFile('D:\tafa.exe');
DeleteFile('D:\System Volume Information\_restore{3BD9A2CC-5338-450F-91D9-A0F0300A3D76}\RP256\A0079531.pif');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(6);
RegKeyIntParamWrite( 'HKLM', 'SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum', '{BDEADF00-C265-11D0-BCED-00A0C90AB50F}', 1);
ExecuteRepair(8);
RebootWindows(true);
end.
После всех процедур выполните скрипт
Код:
begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.
