Запустите AVZ, далее в меню файл - выполнить скрипт, выделите и скопируйте текст ниже в окно выполнения скрипта AVZ, нажмите кнопку «Запустить». На время выполнения скрипта выключите антивирус, firewall и отключите интернет.
Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('WinCtrl32.dll','');
QuarantineFile('H:\WINDOWS\system32\brastk.exe','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winyf05.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winye73.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winxe74.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winvc05.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winsy52.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winsy41.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winsx17.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winrx85.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winrx63.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winrx06.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winrx05.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winrw06.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winpv73.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winpv28.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winou62.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winnt28.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winnt05.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winns17.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winms52.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winlr63.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winlr28.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winkt67.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winkp63.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winjp74.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winho38.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winhn17.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winhn06.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Wingm41.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Wingm17.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winfl74.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winfl17.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winek63.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winek52.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winci74.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winci63.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winbh52.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winbh38.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winag85.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winag30.sys','');
QuarantineFile('H:\WINDOWS\System32\Drivers\Winag17.sys','');
QuarantineFile('H:\WINDOWS\system32\WinCtrl32.dll','');
DeleteFile('H:\WINDOWS\system32\WinCtrl32.dll');
DeleteFile('H:\WINDOWS\System32\Drivers\Winag17.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winag30.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winag85.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winbh38.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winbh52.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winci63.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winci74.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winek52.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winek63.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winfl17.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winfl74.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Wingm17.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Wingm41.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winhn06.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winhn17.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winho38.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winjp74.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winkp63.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winkt67.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winlr28.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winlr63.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winms52.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winns17.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winnt05.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winnt28.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winou62.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winpv28.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winpv73.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winrw06.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winrx05.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winrx06.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winrx63.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winrx85.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winsx17.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winsy41.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winsy52.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winvc05.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winxe74.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winye73.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\Winyf05.sys');
DeleteFile('H:\WINDOWS\system32\brastk.exe');
DeleteFile('WinCtrl32.dll');
BC_ImportDeletedList;
ExecuteSysClean;
BC_DeleteFile('H:\WINDOWS\system32\WinCtrl32.dll');
BC_DeleteFile('H:\WINDOWS\system32\brastk.exe');
BC_DeleteSvc('Winyf05');
BC_DeleteSvc('Winye73');
BC_DeleteSvc('Winxe74');
BC_DeleteSvc('Winvc05');
BC_DeleteSvc('Winsy52');
BC_DeleteSvc('Winsy41');
BC_DeleteSvc('Winsx17');
BC_DeleteSvc('Winrx85');
BC_DeleteSvc('Winrx63');
BC_DeleteSvc('Winrx06');
BC_DeleteSvc('Winrx05');
BC_DeleteSvc('Winrw06');
BC_DeleteSvc('Winpv73');
BC_DeleteSvc('Winpv28');
BC_DeleteSvc('Winou62');
BC_DeleteSvc('Winnt28');
BC_DeleteSvc('Winnt05');
BC_DeleteSvc('Winns17');
BC_DeleteSvc('Winms52');
BC_DeleteSvc('Winlr63');
BC_DeleteSvc('Winlr28');
BC_DeleteSvc('Winkt67');
BC_DeleteSvc('Winkp63');
BC_DeleteSvc('Winjp74');
BC_DeleteSvc('Winho38');
BC_DeleteSvc('Winhn17');
BC_DeleteSvc('Winhn06');
BC_DeleteSvc('Wingm41');
BC_DeleteSvc('Wingm17');
BC_DeleteSvc('Winfl74');
BC_DeleteSvc('Winfl17');
BC_DeleteSvc('Winek63');
BC_DeleteSvc('Winek52');
BC_DeleteSvc('Winci74');
BC_DeleteSvc('Winci63');
BC_DeleteSvc('Winbh52');
BC_DeleteSvc('Winbh38');
BC_DeleteSvc('Winag85');
BC_DeleteSvc('Winag30');
BC_DeleteSvc('Winag17');
BC_Activate;
RebootWindows(true);
end.
Рекомендую проверить систему с помощью cureit и AVPTool
Повторите логи.
