Перейти к содержанию
Правила раздела

Всплывающие окна. вредоносная программа cinemaplus

Zakat

От Zakat
в Помощь в удалении вирусов

 Share

Рекомендуемые сообщения

Zakat Новичок

Zakat

Опубликовано
Опубликовано

При скачивание файла с интернета установилось вредоносное ПО. Стандартные средства Kaspersky Internet Security и тп не помогают.

CollectionLog-2015.09.22-17.02.zip

Ссылка на комментарий
Поделиться на другие сайты
thyrex Мудрец

thyrex

Опубликовано
Опубликовано

Выполните скрипт в AVZ

 

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
  begin
   SearchRootkit(true, true);
   SetAVZGuardStatus(True);
  end;
QuarantineFile('C:\Users\user\AppData\Roaming\QUguno20Wv.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\qDO3S83ScVRfdESohzFn.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\QBTt7ob7poR.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\pyge7cKzwJYByk4zihh4BckT.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\pJkuKSoLrBzetkGZjC7MB.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\PgcOIVGlra5cUZVoUn11Z8p.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\FGQQ09ZY7AnewnuJmeT3.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\EIP52JwUcQ.exe','');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV14.09\ed6a7513-1494-41cb-a12c-eae1559d75b9-10.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\CyZcPHFj.exe','');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-10.exe','');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV14.09\a50f2cf0-561e-4b3f-9462-dfa63a1422f0-10.exe','');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV12.09\8d1ea7d0-4b53-4952-887e-dedc732c7d2b-10.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\7eYMXXPbUEZ8GvHmeeaNVn.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\6gtFgrVbA.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\4ZJGZ3G.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\38doo516XV9Pvf.exe','');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV12.09\2f2ea746-31c3-426b-b937-376963036470-10.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\27APTnX558fo1s6RT.exe','');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV13.09\27899f6e-ea40-440d-8807-f6b568022ad2-10.exe','');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV10.09\1b4f57e2-e6ce-4205-bf1c-ff1f2fcd3db7-10.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\0fSSTDCmPySmV2ydiaxfXieM.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\0VWfnDo.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\0Zz6poObAwgbforNmWl.exe','');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV21.09\08c62819-465d-418d-8059-025e4a0c90e7-10.exe','');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV11.09\06b490ef-2a79-4f2c-a945-77e0b3bf7aa2-10.exe','');
QuarantineFile('C:\Program Files (x86)\CiPlus-4.5vV20.09\05e5a0d9-88f8-47c5-935b-9ed27374490c-10.exe','');
QuarantineFile('C:\iexplore.bat','');
DeleteService('wsafd_1_10_0_19');
DeleteService('byhededo');
DeleteService('comyninu');
DeleteService('globalUpdate');
DeleteService('globalUpdate1d0eb10f3b71056');
DeleteService('globalUpdatem');
DeleteService('globalUpdatem1d0eb10f3b9a870');
DeleteService('hyverumu');
DeleteFile('C:\Program Files (x86)\3420AEC0-1437662416-11DD-902E-74D02BC59B88\knsi44D9.tmpfs','32');
DeleteFile('C:\Program Files (x86)\3420AEC0-1437662416-11DD-902E-74D02BC59B88\hnsi737F.tmp','32');
DeleteFile('C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe','32');
DeleteFile('C:\Program Files (x86)\3420AEC0-1437662416-11DD-902E-74D02BC59B88\jnsd5D6E.tmp','32');
DeleteFile('C:\Windows\system32\drivers\wsafd_1_10_0_19.sys','32');
DeleteFile('C:\iexplore.bat','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV16.08\04c7b202-4edf-435d-bc9d-2234908e1fc8-1-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV16.08\04c7b202-4edf-435d-bc9d-2234908e1fc8-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV16.08\04c7b202-4edf-435d-bc9d-2234908e1fc8-3.exe','32');
DeleteFile('C:\Windows\Tasks\04c7b202-4edf-435d-bc9d-2234908e1fc8-3.job','32');
DeleteFile('C:\Windows\Tasks\04c7b202-4edf-435d-bc9d-2234908e1fc8-10_user.job','32');
DeleteFile('C:\Windows\Tasks\04c7b202-4edf-435d-bc9d-2234908e1fc8-1-7.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV16.08\04c7b202-4edf-435d-bc9d-2234908e1fc8-5.exe','32');
DeleteFile('C:\Windows\Tasks\04c7b202-4edf-435d-bc9d-2234908e1fc8-5.job','32');
DeleteFile('C:\Windows\Tasks\04c7b202-4edf-435d-bc9d-2234908e1fc8-5_user.job','32');
DeleteFile('C:\Windows\Tasks\04c7b202-4edf-435d-bc9d-2234908e1fc8-7.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV20.09\05e5a0d9-88f8-47c5-935b-9ed27374490c-1-6.exe','32');
DeleteFile('C:\Windows\Tasks\05e5a0d9-88f8-47c5-935b-9ed27374490c-1-6.job','32');
DeleteFile('C:\Windows\Tasks\05e5a0d9-88f8-47c5-935b-9ed27374490c-1-7.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV20.09\05e5a0d9-88f8-47c5-935b-9ed27374490c-1-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV20.09\05e5a0d9-88f8-47c5-935b-9ed27374490c-10.exe','32');
DeleteFile('C:\Windows\Tasks\05e5a0d9-88f8-47c5-935b-9ed27374490c-10_user.job','32');
DeleteFile('C:\Windows\Tasks\05e5a0d9-88f8-47c5-935b-9ed27374490c-3.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV20.09\05e5a0d9-88f8-47c5-935b-9ed27374490c-3.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV20.09\05e5a0d9-88f8-47c5-935b-9ed27374490c-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV20.09\05e5a0d9-88f8-47c5-935b-9ed27374490c-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV20.09\05e5a0d9-88f8-47c5-935b-9ed27374490c-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV11.09\06b490ef-2a79-4f2c-a945-77e0b3bf7aa2-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV11.09\06b490ef-2a79-4f2c-a945-77e0b3bf7aa2-1-7.exe','32');
DeleteFile('C:\Windows\Tasks\06b490ef-2a79-4f2c-a945-77e0b3bf7aa2-1-7.job','32');
DeleteFile('C:\Windows\Tasks\06b490ef-2a79-4f2c-a945-77e0b3bf7aa2-1-6.job','32');
DeleteFile('C:\Windows\Tasks\05e5a0d9-88f8-47c5-935b-9ed27374490c-7.job','32');
DeleteFile('C:\Windows\Tasks\05e5a0d9-88f8-47c5-935b-9ed27374490c-6.job','32');
DeleteFile('C:\Windows\Tasks\05e5a0d9-88f8-47c5-935b-9ed27374490c-5_user.job','32');
DeleteFile('C:\Windows\Tasks\05e5a0d9-88f8-47c5-935b-9ed27374490c-5.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV11.09\06b490ef-2a79-4f2c-a945-77e0b3bf7aa2-10.exe','32');
DeleteFile('C:\Windows\Tasks\06b490ef-2a79-4f2c-a945-77e0b3bf7aa2-10_user.job','32');
DeleteFile('C:\Windows\Tasks\06b490ef-2a79-4f2c-a945-77e0b3bf7aa2-3.job','32');
DeleteFile('C:\Windows\Tasks\06b490ef-2a79-4f2c-a945-77e0b3bf7aa2-5.job','32');
DeleteFile('C:\Windows\Tasks\06b490ef-2a79-4f2c-a945-77e0b3bf7aa2-5_user.job','32');
DeleteFile('C:\Windows\Tasks\06b490ef-2a79-4f2c-a945-77e0b3bf7aa2-6.job','32');
DeleteFile('C:\Windows\Tasks\06b490ef-2a79-4f2c-a945-77e0b3bf7aa2-7.job','32');
DeleteFile('C:\Windows\Tasks\08c62819-465d-418d-8059-025e4a0c90e7-1-6.job','32');
DeleteFile('C:\Windows\Tasks\08c62819-465d-418d-8059-025e4a0c90e7-1-7.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV21.09\08c62819-465d-418d-8059-025e4a0c90e7-1-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV21.09\08c62819-465d-418d-8059-025e4a0c90e7-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV11.09\06b490ef-2a79-4f2c-a945-77e0b3bf7aa2-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV11.09\06b490ef-2a79-4f2c-a945-77e0b3bf7aa2-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV11.09\06b490ef-2a79-4f2c-a945-77e0b3bf7aa2-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV11.09\06b490ef-2a79-4f2c-a945-77e0b3bf7aa2-3.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV21.09\08c62819-465d-418d-8059-025e4a0c90e7-10.exe','32');
DeleteFile('C:\Windows\Tasks\08c62819-465d-418d-8059-025e4a0c90e7-10_user.job','32');
DeleteFile('C:\Windows\Tasks\08c62819-465d-418d-8059-025e4a0c90e7-3.job','32');
DeleteFile('C:\Windows\Tasks\08c62819-465d-418d-8059-025e4a0c90e7-5.job','32');
DeleteFile('C:\Windows\Tasks\08c62819-465d-418d-8059-025e4a0c90e7-5_user.job','32');
DeleteFile('C:\Windows\Tasks\08c62819-465d-418d-8059-025e4a0c90e7-6.job','32');
DeleteFile('C:\Windows\Tasks\08c62819-465d-418d-8059-025e4a0c90e7-7.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV21.09\08c62819-465d-418d-8059-025e4a0c90e7-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV21.09\08c62819-465d-418d-8059-025e4a0c90e7-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV21.09\08c62819-465d-418d-8059-025e4a0c90e7-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV21.09\08c62819-465d-418d-8059-025e4a0c90e7-3.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\0AQClEoHaS6.exe','32');
DeleteFile('C:\Windows\Tasks\0AQClEoHaS6.job','32');
DeleteFile('C:\Windows\Tasks\0fSSTDCmPySmV2ydiaxfXieM.job','32');
DeleteFile('C:\Windows\Tasks\0oVBFubnf3CO2ZD.job','32');
DeleteFile('C:\Windows\Tasks\0VWfnDo.job','32');
DeleteFile('C:\Windows\Tasks\0WsFkqU1aOihhj0d.job','32');
DeleteFile('C:\Windows\Tasks\0Zz6poObAwgbforNmWl.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\0WsFkqU1aOihhj0d.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\0VWfnDo.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\0oVBFubnf3CO2ZD.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\0fSSTDCmPySmV2ydiaxfXieM.exe','32');
DeleteFile('C:\Windows\Tasks\1073e238-02db-4ecf-a9a0-9d114cc37ad3-10_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV18.08\1073e238-02db-4ecf-a9a0-9d114cc37ad3-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV18.08\1073e238-02db-4ecf-a9a0-9d114cc37ad3-5.exe','32');
DeleteFile('C:\Windows\Tasks\1073e238-02db-4ecf-a9a0-9d114cc37ad3-5_user.job','32');
DeleteFile('C:\Windows\Tasks\12402885-2da2-44a7-bc80-01cfa4b0d446-10_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV04.09\12402885-2da2-44a7-bc80-01cfa4b0d446-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV04.09\12402885-2da2-44a7-bc80-01cfa4b0d446-5.exe','32');
DeleteFile('C:\Windows\Tasks\12402885-2da2-44a7-bc80-01cfa4b0d446-5_user.job','32');
DeleteFile('C:\Windows\Tasks\19b3f0a0-0fe7-46c9-90f3-dbd1541aec50-10_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV08.09\19b3f0a0-0fe7-46c9-90f3-dbd1541aec50-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV08.09\19b3f0a0-0fe7-46c9-90f3-dbd1541aec50-5.exe','32');
DeleteFile('C:\Windows\Tasks\19b3f0a0-0fe7-46c9-90f3-dbd1541aec50-5_user.job','32');
DeleteFile('C:\Windows\Tasks\1b4f57e2-e6ce-4205-bf1c-ff1f2fcd3db7-1-6.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV10.09\1b4f57e2-e6ce-4205-bf1c-ff1f2fcd3db7-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV10.09\1b4f57e2-e6ce-4205-bf1c-ff1f2fcd3db7-1-7.exe','32');
DeleteFile('C:\Windows\Tasks\1b4f57e2-e6ce-4205-bf1c-ff1f2fcd3db7-1-7.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV10.09\1b4f57e2-e6ce-4205-bf1c-ff1f2fcd3db7-10.exe','32');
DeleteFile('C:\Windows\Tasks\1b4f57e2-e6ce-4205-bf1c-ff1f2fcd3db7-10_user.job','32');
DeleteFile('C:\Windows\Tasks\1b4f57e2-e6ce-4205-bf1c-ff1f2fcd3db7-3.job','32');
DeleteFile('C:\Windows\Tasks\1b4f57e2-e6ce-4205-bf1c-ff1f2fcd3db7-5.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV10.09\1b4f57e2-e6ce-4205-bf1c-ff1f2fcd3db7-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV10.09\1b4f57e2-e6ce-4205-bf1c-ff1f2fcd3db7-3.exe','32');
DeleteFile('C:\Windows\Tasks\1b4f57e2-e6ce-4205-bf1c-ff1f2fcd3db7-5_user.job','32');
DeleteFile('C:\Windows\Tasks\1b4f57e2-e6ce-4205-bf1c-ff1f2fcd3db7-6.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV10.09\1b4f57e2-e6ce-4205-bf1c-ff1f2fcd3db7-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV10.09\1b4f57e2-e6ce-4205-bf1c-ff1f2fcd3db7-7.exe','32');
DeleteFile('C:\Windows\Tasks\1b4f57e2-e6ce-4205-bf1c-ff1f2fcd3db7-7.job','32');
DeleteFile('C:\Windows\Tasks\1xn48FsXds.job','32');
DeleteFile('C:\Windows\Tasks\1ZaVmfsPOv.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\1ZaVmfsPOv.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\1xn48FsXds.exe','32');
DeleteFile('C:\Windows\Tasks\24e7b09e-a8fa-4fa2-8c3b-115a2b2d784d-1-6.job','32');
DeleteFile('C:\Windows\Tasks\24e7b09e-a8fa-4fa2-8c3b-115a2b2d784d-1-7.job','32');
DeleteFile('C:\Windows\Tasks\24e7b09e-a8fa-4fa2-8c3b-115a2b2d784d-10_user.job','32');
DeleteFile('C:\Windows\Tasks\24e7b09e-a8fa-4fa2-8c3b-115a2b2d784d-3.job','32');
DeleteFile('C:\Windows\Tasks\24e7b09e-a8fa-4fa2-8c3b-115a2b2d784d-5.job','32');
DeleteFile('C:\Windows\Tasks\24e7b09e-a8fa-4fa2-8c3b-115a2b2d784d-5_user.job','32');
DeleteFile('C:\Windows\Tasks\24e7b09e-a8fa-4fa2-8c3b-115a2b2d784d-6.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV11.08\24e7b09e-a8fa-4fa2-8c3b-115a2b2d784d-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV11.08\24e7b09e-a8fa-4fa2-8c3b-115a2b2d784d-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV11.08\24e7b09e-a8fa-4fa2-8c3b-115a2b2d784d-3.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV11.08\24e7b09e-a8fa-4fa2-8c3b-115a2b2d784d-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV11.08\24e7b09e-a8fa-4fa2-8c3b-115a2b2d784d-1-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV11.08\24e7b09e-a8fa-4fa2-8c3b-115a2b2d784d-1-6.exe','32');
DeleteFile('C:\Windows\Tasks\24e7b09e-a8fa-4fa2-8c3b-115a2b2d784d-7.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV11.08\24e7b09e-a8fa-4fa2-8c3b-115a2b2d784d-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV13.09\27899f6e-ea40-440d-8807-f6b568022ad2-1-6.exe','32');
DeleteFile('C:\Windows\Tasks\27899f6e-ea40-440d-8807-f6b568022ad2-1-6.job','32');
DeleteFile('C:\Windows\Tasks\27899f6e-ea40-440d-8807-f6b568022ad2-10_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV13.09\27899f6e-ea40-440d-8807-f6b568022ad2-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV13.09\27899f6e-ea40-440d-8807-f6b568022ad2-3.exe','32');
DeleteFile('C:\Windows\Tasks\27899f6e-ea40-440d-8807-f6b568022ad2-3.job','32');
DeleteFile('C:\Windows\Tasks\27899f6e-ea40-440d-8807-f6b568022ad2-5.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV13.09\27899f6e-ea40-440d-8807-f6b568022ad2-5.exe','32');
DeleteFile('C:\Windows\Tasks\27899f6e-ea40-440d-8807-f6b568022ad2-5_user.job','32');
DeleteFile('C:\Windows\Tasks\27899f6e-ea40-440d-8807-f6b568022ad2-6.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV13.09\27899f6e-ea40-440d-8807-f6b568022ad2-6.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\27APTnX558fo1s6RT.exe','32');
DeleteFile('C:\Windows\Tasks\27APTnX558fo1s6RT.job','32');
DeleteFile('C:\Windows\Tasks\2cnjqX3Jjw6VaAbKBFB.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\2cnjqX3Jjw6VaAbKBFB.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV19.08\2e6a3598-867b-4568-b2e1-a156f2b9aa74-10.exe','32');
DeleteFile('C:\Windows\Tasks\2e6a3598-867b-4568-b2e1-a156f2b9aa74-10_user.job','32');
DeleteFile('C:\Windows\Tasks\2e6a3598-867b-4568-b2e1-a156f2b9aa74-5_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV19.08\2e6a3598-867b-4568-b2e1-a156f2b9aa74-5.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\2eO7UFRGk5.exe','32');
DeleteFile('C:\Windows\Tasks\2f2ea746-31c3-426b-b937-376963036470-1-6.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV12.09\2f2ea746-31c3-426b-b937-376963036470-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV12.09\2f2ea746-31c3-426b-b937-376963036470-10.exe','32');
DeleteFile('C:\Windows\Tasks\2f2ea746-31c3-426b-b937-376963036470-3.job','32');
DeleteFile('C:\Windows\Tasks\2f2ea746-31c3-426b-b937-376963036470-5.job','32');
DeleteFile('C:\Windows\Tasks\2f2ea746-31c3-426b-b937-376963036470-5_user.job','32');
DeleteFile('C:\Windows\Tasks\2f2ea746-31c3-426b-b937-376963036470-6.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV12.09\2f2ea746-31c3-426b-b937-376963036470-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV12.09\2f2ea746-31c3-426b-b937-376963036470-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV12.09\2f2ea746-31c3-426b-b937-376963036470-3.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\2knxped.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\2SZ5Pr2Eoy4RTjceJ7OdJz5.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\2W2y8bcZ27OkHaQS6LR5iwNK8S.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV21.08\31ca7c5e-55ed-42b6-9fbb-583bfb2f0897-10.exe','32');
DeleteFile('C:\Windows\Tasks\31ca7c5e-55ed-42b6-9fbb-583bfb2f0897-10_user.job','32');
DeleteFile('C:\Windows\Tasks\2W2y8bcZ27OkHaQS6LR5iwNK8S.job','32');
DeleteFile('C:\Windows\Tasks\2UFBKkiD4TI3idlzfFVq8htZKmX.job','32');
DeleteFile('C:\Windows\Tasks\2SZ5Pr2Eoy4RTjceJ7OdJz5.job','32');
DeleteFile('C:\Windows\Tasks\2knxped.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV21.08\31ca7c5e-55ed-42b6-9fbb-583bfb2f0897-5.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\35g07X8ry09zp.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\38doo516XV9Pvf.exe','32');
DeleteFile('C:\Windows\Tasks\38doo516XV9Pvf.job','32');
DeleteFile('C:\Windows\Tasks\35g07X8ry09zp.job','32');
DeleteFile('C:\Windows\Tasks\31ca7c5e-55ed-42b6-9fbb-583bfb2f0897-5_user.job','32');
DeleteFile('C:\Windows\Tasks\3de604d0-b1eb-44ca-ba0a-5ef0a3b17d60-10_user.job','32');
DeleteFile('C:\Windows\Tasks\3de604d0-b1eb-44ca-ba0a-5ef0a3b17d60-5_user.job','32');
DeleteFile('C:\Windows\Tasks\3kzHGebIAnTwTXfr.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\3kzHGebIAnTwTXfr.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV30.08\3de604d0-b1eb-44ca-ba0a-5ef0a3b17d60-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV30.08\3de604d0-b1eb-44ca-ba0a-5ef0a3b17d60-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV23.08\4056c2e4-a70d-4d49-9849-0b016aba4bca-10.exe','32');
DeleteFile('C:\Windows\Tasks\4056c2e4-a70d-4d49-9849-0b016aba4bca-10_user.job','32');
DeleteFile('C:\Windows\Tasks\4056c2e4-a70d-4d49-9849-0b016aba4bca-5_user.job','32');
DeleteFile('C:\Windows\Tasks\41f98434-29f6-4066-ba95-89e50c0ea2bf-10_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV15.08\41f98434-29f6-4066-ba95-89e50c0ea2bf-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV23.08\4056c2e4-a70d-4d49-9849-0b016aba4bca-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV15.08\41f98434-29f6-4066-ba95-89e50c0ea2bf-5.exe','32');
DeleteFile('C:\Windows\Tasks\41f98434-29f6-4066-ba95-89e50c0ea2bf-5_user.job','32');
DeleteFile('C:\Windows\Tasks\4225929b-1003-49cc-9a23-dd3c3c017594-1-6.job','32');
DeleteFile('C:\Windows\Tasks\4225929b-1003-49cc-9a23-dd3c3c017594-10_user.job','32');
DeleteFile('C:\Windows\Tasks\4225929b-1003-49cc-9a23-dd3c3c017594-3.job','32');
DeleteFile('C:\Windows\Tasks\4225929b-1003-49cc-9a23-dd3c3c017594-5_user.job','32');
DeleteFile('C:\Windows\Tasks\4225929b-1003-49cc-9a23-dd3c3c017594-6.job','32');
DeleteFile('C:\Windows\Tasks\4oYcnGqYtgU78JO5h65s5Fz.job','32');
DeleteFile('C:\Windows\Tasks\4q5QxWT.job','32');
DeleteFile('C:\Windows\Tasks\4R6naLKbRZI2dl2W.job','32');
DeleteFile('C:\Windows\Tasks\4ZJGZ3G.job','32');
DeleteFile('C:\Windows\Tasks\51ROvr8T4hQfgh183.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\4ZJGZ3G.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\51ROvr8T4hQfgh183.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV06.09\53c34064-80d0-4142-b8ca-88c750ff99ae-10.exe','32');
DeleteFile('C:\Windows\Tasks\53c34064-80d0-4142-b8ca-88c750ff99ae-10_user.job','32');
DeleteFile('C:\Windows\Tasks\53c34064-80d0-4142-b8ca-88c750ff99ae-5_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV06.09\53c34064-80d0-4142-b8ca-88c750ff99ae-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV13.09\4225929b-1003-49cc-9a23-dd3c3c017594-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV13.09\4225929b-1003-49cc-9a23-dd3c3c017594-3.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV13.09\4225929b-1003-49cc-9a23-dd3c3c017594-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV13.09\4225929b-1003-49cc-9a23-dd3c3c017594-1-6.exe','32');
DeleteFile('C:\Windows\Tasks\5575dd6d-931c-453e-8552-3e82ce2a8b83-10_user.job','32');
DeleteFile('C:\Windows\Tasks\5575dd6d-931c-453e-8552-3e82ce2a8b83-5_user.job','32');
DeleteFile('C:\Windows\Tasks\55b46ad1-ce0d-4fc0-a7b5-375183d1e532-10_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV29.08\55b46ad1-ce0d-4fc0-a7b5-375183d1e532-10.exe','32');
DeleteFile('1.1\5575dd6d-931c-453e-8552-3e82ce2a8b83-5.exe','32');
DeleteFile('C:\Program Files (x86)\SavePass','32');
DeleteFile('1.1\5575dd6d-931c-453e-8552-3e82ce2a8b83-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV29.08\55b46ad1-ce0d-4fc0-a7b5-375183d1e532-5.exe','32');
DeleteFile('C:\Windows\Tasks\55b46ad1-ce0d-4fc0-a7b5-375183d1e532-5_user.job','32');
DeleteFile('C:\Windows\Tasks\5a0ZXXrXiqwhq.job','32');
DeleteFile('C:\Windows\Tasks\5AJF2BzwaPkuBrTyU.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\5AJF2BzwaPkuBrTyU.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\5a0ZXXrXiqwhq.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV22.08\67cfb3db-73ca-48a4-aabd-cb6357e94b28-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV22.08\67cfb3db-73ca-48a4-aabd-cb6357e94b28-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV03.09\6853de1c-cd17-4616-883f-9325fee36674-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV03.09\6853de1c-cd17-4616-883f-9325fee36674-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV09.09\6a0ced98-1f00-43d8-b81f-70ebcbab12b2-1-7.exe','32');
DeleteFile('C:\Windows\Tasks\6a0ced98-1f00-43d8-b81f-70ebcbab12b2-1-7.job','32');
DeleteFile('C:\Windows\Tasks\6853de1c-cd17-4616-883f-9325fee36674-5_user.job','32');
DeleteFile('C:\Windows\Tasks\6853de1c-cd17-4616-883f-9325fee36674-10_user.job','32');
DeleteFile('C:\Windows\Tasks\67cfb3db-73ca-48a4-aabd-cb6357e94b28-5_user.job','32');
DeleteFile('C:\Windows\Tasks\67cfb3db-73ca-48a4-aabd-cb6357e94b28-10_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV09.09\6a0ced98-1f00-43d8-b81f-70ebcbab12b2-10.exe','32');
DeleteFile('C:\Windows\Tasks\6a0ced98-1f00-43d8-b81f-70ebcbab12b2-10_user.job','32');
DeleteFile('C:\Windows\Tasks\6a0ced98-1f00-43d8-b81f-70ebcbab12b2-5_user.job','32');
DeleteFile('C:\Windows\Tasks\6a0ced98-1f00-43d8-b81f-70ebcbab12b2-7.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV09.09\6a0ced98-1f00-43d8-b81f-70ebcbab12b2-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV09.09\6a0ced98-1f00-43d8-b81f-70ebcbab12b2-5.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\6eZG9EacMUSkVFtsoo7Wo.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\6gtFgrVbA.exe','32');
DeleteFile('C:\Windows\Tasks\6gtFgrVbA.job','32');
DeleteFile('C:\Windows\Tasks\6eZG9EacMUSkVFtsoo7Wo.job','32');
DeleteFile('C:\Windows\Tasks\6hKqD46tryR.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\6hKqD46tryR.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\6j05hRymCcQkEFKPS5XU0D.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\6tDFAgBOtwGBmDlSyezgD2C.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\7B9UtpIP.exe','32');
DeleteFile('C:\Windows\Tasks\7B9UtpIP.job','32');
DeleteFile('C:\Windows\Tasks\6tDFAgBOtwGBmDlSyezgD2C.job','32');
DeleteFile('C:\Windows\Tasks\6j05hRymCcQkEFKPS5XU0D.job','32');
DeleteFile('C:\Windows\Tasks\7eYMXXPbUEZ8GvHmeeaNVn.job','32');
DeleteFile('C:\Windows\Tasks\7KFvm4mC.job','32');
DeleteFile('C:\Windows\Tasks\8aeGFLWZ6hcAK2DM.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\8aeGFLWZ6hcAK2DM.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\7KFvm4mC.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\7eYMXXPbUEZ8GvHmeeaNVn.exe','32');
DeleteFile('C:\Windows\Tasks\8b75a6a8-54ef-498c-a38d-685a2cd61b97-5_user.job','32');
DeleteFile('C:\Windows\Tasks\8d1ea7d0-4b53-4952-887e-dedc732c7d2b-1-6.job','32');
DeleteFile('C:\Windows\Tasks\8d1ea7d0-4b53-4952-887e-dedc732c7d2b-10_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV12.09\8d1ea7d0-4b53-4952-887e-dedc732c7d2b-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV12.09\8d1ea7d0-4b53-4952-887e-dedc732c7d2b-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV23.07\8b75a6a8-54ef-498c-a38d-685a2cd61b97-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV12.09\8d1ea7d0-4b53-4952-887e-dedc732c7d2b-3.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV12.09\8d1ea7d0-4b53-4952-887e-dedc732c7d2b-5.exe','32');
DeleteFile('C:\Windows\Tasks\8d1ea7d0-4b53-4952-887e-dedc732c7d2b-3.job','32');
DeleteFile('C:\Windows\Tasks\8d1ea7d0-4b53-4952-887e-dedc732c7d2b-5.job','32');
DeleteFile('C:\Windows\Tasks\8d1ea7d0-4b53-4952-887e-dedc732c7d2b-5_user.job','32');
DeleteFile('C:\Windows\Tasks\8d1ea7d0-4b53-4952-887e-dedc732c7d2b-6.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV12.09\8d1ea7d0-4b53-4952-887e-dedc732c7d2b-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV07.09\8e7b1f21-da47-4017-a62e-9ae3c838794c-10.exe','32');
DeleteFile('C:\Windows\Tasks\8e7b1f21-da47-4017-a62e-9ae3c838794c-10_user.job','32');
DeleteFile('C:\Windows\Tasks\8e7b1f21-da47-4017-a62e-9ae3c838794c-5_user.job','32');
DeleteFile('C:\Windows\Tasks\8q0KSAYCNVC6PT9MIrnEw69X8wU.job','32');
DeleteFile('C:\Windows\Tasks\8YVIkqBmi08Hqb1k.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\8YVIkqBmi08Hqb1k.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\8q0KSAYCNVC6PT9MIrnEw69X8wU.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV07.09\8e7b1f21-da47-4017-a62e-9ae3c838794c-5.exe','32');
DeleteFile('C:\Windows\Tasks\955d424c-337e-4501-a581-62262e86c3bf-1-7.job','32');
DeleteFile('C:\Windows\Tasks\955d424c-337e-4501-a581-62262e86c3bf-10_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV12.08\955d424c-337e-4501-a581-62262e86c3bf-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV12.08\955d424c-337e-4501-a581-62262e86c3bf-1-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV12.08\955d424c-337e-4501-a581-62262e86c3bf-3.exe','32');
DeleteFile('C:\Windows\Tasks\955d424c-337e-4501-a581-62262e86c3bf-3.job','32');
DeleteFile('C:\Windows\Tasks\955d424c-337e-4501-a581-62262e86c3bf-5_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV12.08\955d424c-337e-4501-a581-62262e86c3bf-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV12.08\955d424c-337e-4501-a581-62262e86c3bf-7.exe','32');
DeleteFile('C:\Windows\Tasks\955d424c-337e-4501-a581-62262e86c3bf-7.job','32');
DeleteFile('C:\Windows\Tasks\9c77ca05-6c28-42fd-814b-2b00a5c3767e-10_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV01.09\9c77ca05-6c28-42fd-814b-2b00a5c3767e-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV01.09\9c77ca05-6c28-42fd-814b-2b00a5c3767e-5.exe','32');
DeleteFile('C:\Windows\Tasks\9c77ca05-6c28-42fd-814b-2b00a5c3767e-5_user.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\9HtQhbc4DyMdxl4Wx8.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\9jYB6m0oYXwCBbXoqIeQ.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\9oYr6711sdcLBt4pPeq.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV04.09\a4ca1680-7d6c-47bc-8004-d1507d4d010d-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV04.09\a4ca1680-7d6c-47bc-8004-d1507d4d010d-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV14.09\a50f2cf0-561e-4b3f-9462-dfa63a1422f0-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV14.09\a50f2cf0-561e-4b3f-9462-dfa63a1422f0-1-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV14.09\a50f2cf0-561e-4b3f-9462-dfa63a1422f0-10.exe','32');
DeleteFile('C:\Windows\Tasks\a50f2cf0-561e-4b3f-9462-dfa63a1422f0-10_user.job','32');
DeleteFile('C:\Windows\Tasks\a50f2cf0-561e-4b3f-9462-dfa63a1422f0-1-7.job','32');
DeleteFile('C:\Windows\Tasks\a50f2cf0-561e-4b3f-9462-dfa63a1422f0-1-6.job','32');
DeleteFile('C:\Windows\Tasks\a4ca1680-7d6c-47bc-8004-d1507d4d010d-5_user.job','32');
DeleteFile('C:\Windows\Tasks\a4ca1680-7d6c-47bc-8004-d1507d4d010d-10_user.job','32');
DeleteFile('C:\Windows\Tasks\9oYr6711sdcLBt4pPeq.job','32');
DeleteFile('C:\Windows\Tasks\9jYB6m0oYXwCBbXoqIeQ.job','32');
DeleteFile('C:\Windows\Tasks\9HtQhbc4DyMdxl4Wx8.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV14.09\a50f2cf0-561e-4b3f-9462-dfa63a1422f0-3.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV14.09\a50f2cf0-561e-4b3f-9462-dfa63a1422f0-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV14.09\a50f2cf0-561e-4b3f-9462-dfa63a1422f0-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV14.09\a50f2cf0-561e-4b3f-9462-dfa63a1422f0-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV31.08\a7f75f13-1f29-4638-9450-5447035246f0-10.exe','32');
DeleteFile('C:\Windows\Tasks\a7f75f13-1f29-4638-9450-5447035246f0-10_user.job','32');
DeleteFile('C:\Windows\Tasks\a50f2cf0-561e-4b3f-9462-dfa63a1422f0-7.job','32');
DeleteFile('C:\Windows\Tasks\a50f2cf0-561e-4b3f-9462-dfa63a1422f0-6.job','32');
DeleteFile('C:\Windows\Tasks\a50f2cf0-561e-4b3f-9462-dfa63a1422f0-5_user.job','32');
DeleteFile('C:\Windows\Tasks\a50f2cf0-561e-4b3f-9462-dfa63a1422f0-5.job','32');
DeleteFile('C:\Windows\Tasks\a50f2cf0-561e-4b3f-9462-dfa63a1422f0-3.job','32');
DeleteFile('C:\Windows\Tasks\A7kboWUSyrfay0ck0Xqqu5.job','32');
DeleteFile('C:\Windows\Tasks\aa08efb1-564a-4927-bf3b-f81bb4a88483-10_user.job','32');
DeleteFile('C:\Windows\Tasks\aa08efb1-564a-4927-bf3b-f81bb4a88483-5_user.job','32');
DeleteFile('C:\Windows\Tasks\AApsl1iSFpdpiMnEA.job','32');
DeleteFile('C:\Windows\Tasks\ab08bf43-aab6-4e65-b76f-1a17441da76a-10_user.job','32');
DeleteFile('C:\Windows\Tasks\ab08bf43-aab6-4e65-b76f-1a17441da76a-5_user.job','32');
DeleteFile('C:\Windows\Tasks\ADlLWo9.job','32');
DeleteFile('C:\Windows\Tasks\ae301c69-2769-4f74-97e5-84a02776c760-10_user.job','32');
DeleteFile('C:\Windows\Tasks\ae301c69-2769-4f74-97e5-84a02776c760-5_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV05.09\ae301c69-2769-4f74-97e5-84a02776c760-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV05.09\ae301c69-2769-4f74-97e5-84a02776c760-10.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\ADlLWo9.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV24.07\ab08bf43-aab6-4e65-b76f-1a17441da76a-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV24.07\ab08bf43-aab6-4e65-b76f-1a17441da76a-10.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\AApsl1iSFpdpiMnEA.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV30.08\aa08efb1-564a-4927-bf3b-f81bb4a88483-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV30.08\aa08efb1-564a-4927-bf3b-f81bb4a88483-10.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\akdfBWL06eUTlvrbjC.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\aXpKaqxGT9Jgbkl.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\aXSe1cXmEPk3hg4TE.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV03.09\b228f200-6b15-42ed-8bb0-212934b13db0-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV03.09\b228f200-6b15-42ed-8bb0-212934b13db0-5.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\B2E3kjGW3jW9CLchToq9.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV27.07\b3685bdc-665e-47da-9835-6e0ebc3e4904-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV27.07\b3685bdc-665e-47da-9835-6e0ebc3e4904-1-7.exe','32');
DeleteFile('C:\Windows\Tasks\b3685bdc-665e-47da-9835-6e0ebc3e4904-1-7.job','32');
DeleteFile('C:\Windows\Tasks\b3685bdc-665e-47da-9835-6e0ebc3e4904-1-6.job','32');
DeleteFile('C:\Windows\Tasks\B2E3kjGW3jW9CLchToq9.job','32');
DeleteFile('C:\Windows\Tasks\b228f200-6b15-42ed-8bb0-212934b13db0-5_user.job','32');
DeleteFile('C:\Windows\Tasks\b228f200-6b15-42ed-8bb0-212934b13db0-10_user.job','32');
DeleteFile('C:\Windows\Tasks\aXSe1cXmEPk3hg4TE.job','32');
DeleteFile('C:\Windows\Tasks\aXpKaqxGT9Jgbkl.job','32');
DeleteFile('C:\Windows\Tasks\akdfBWL06eUTlvrbjC.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV27.07\b3685bdc-665e-47da-9835-6e0ebc3e4904-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV27.07\b3685bdc-665e-47da-9835-6e0ebc3e4904-3.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV27.07\b3685bdc-665e-47da-9835-6e0ebc3e4904-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV27.07\b3685bdc-665e-47da-9835-6e0ebc3e4904-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV27.07\b3685bdc-665e-47da-9835-6e0ebc3e4904-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV07.09\b5bf79b4-c943-49ed-a606-2954cab7fbc4-10.exe','32');
DeleteFile('C:\Windows\Tasks\b5bf79b4-c943-49ed-a606-2954cab7fbc4-10_user.job','32');
DeleteFile('C:\Windows\Tasks\b3685bdc-665e-47da-9835-6e0ebc3e4904-7.job','32');
DeleteFile('C:\Windows\Tasks\b3685bdc-665e-47da-9835-6e0ebc3e4904-6.job','32');
DeleteFile('C:\Windows\Tasks\b3685bdc-665e-47da-9835-6e0ebc3e4904-5_user.job','32');
DeleteFile('C:\Windows\Tasks\b3685bdc-665e-47da-9835-6e0ebc3e4904-5.job','32');
DeleteFile('C:\Windows\Tasks\b3685bdc-665e-47da-9835-6e0ebc3e4904-3.job','32');
DeleteFile('C:\Windows\Tasks\b3685bdc-665e-47da-9835-6e0ebc3e4904-10_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV07.09\b5bf79b4-c943-49ed-a606-2954cab7fbc4-5.exe','32');
DeleteFile('C:\Windows\Tasks\b5bf79b4-c943-49ed-a606-2954cab7fbc4-5_user.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\BEwjLybqFiWkfxG9.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\bipVHJN9IcohsD6i82dO.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\BM049qwRKZZvFn.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\BTzeQoR9yY.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\BTZu7gsf1.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\BzWnglONaJnpKKv5dsN.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\c28gpch8gLxNKC92vMqDqxtzw6.exe','32');
DeleteFile('C:\Windows\Tasks\c28gpch8gLxNKC92vMqDqxtzw6.job','32');
DeleteFile('C:\Windows\Tasks\BTZu7gsf1.job','32');
DeleteFile('C:\Windows\Tasks\BTzeQoR9yY.job','32');
DeleteFile('C:\Windows\Tasks\BM049qwRKZZvFn.job','32');
DeleteFile('C:\Windows\Tasks\bipVHJN9IcohsD6i82dO.job','32');
DeleteFile('C:\Windows\Tasks\BEwjLybqFiWkfxG9.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV09.08\c76e571e-055a-4256-87f6-ab4215a22da4-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV09.08\c76e571e-055a-4256-87f6-ab4215a22da4-1-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV09.08\c76e571e-055a-4256-87f6-ab4215a22da4-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV09.08\c76e571e-055a-4256-87f6-ab4215a22da4-3.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV09.08\c76e571e-055a-4256-87f6-ab4215a22da4-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV09.08\c76e571e-055a-4256-87f6-ab4215a22da4-6.exe','32');
DeleteFile('C:\Windows\Tasks\c76e571e-055a-4256-87f6-ab4215a22da4-6.job','32');
DeleteFile('C:\Windows\Tasks\c76e571e-055a-4256-87f6-ab4215a22da4-5_user.job','32');
DeleteFile('C:\Windows\Tasks\c76e571e-055a-4256-87f6-ab4215a22da4-5.job','32');
DeleteFile('C:\Windows\Tasks\c76e571e-055a-4256-87f6-ab4215a22da4-3.job','32');
DeleteFile('C:\Windows\Tasks\c76e571e-055a-4256-87f6-ab4215a22da4-10_user.job','32');
DeleteFile('C:\Windows\Tasks\c76e571e-055a-4256-87f6-ab4215a22da4-1-7.job','32');
DeleteFile('C:\Windows\Tasks\c76e571e-055a-4256-87f6-ab4215a22da4-1-6.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV09.08\c76e571e-055a-4256-87f6-ab4215a22da4-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV26.07\c7ee6271-91cc-4e7f-ab1e-9c1ea7d24ac2-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV26.07\c7ee6271-91cc-4e7f-ab1e-9c1ea7d24ac2-1-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV26.07\c7ee6271-91cc-4e7f-ab1e-9c1ea7d24ac2-10.exe','32');
DeleteFile('C:\Windows\Tasks\c7ee6271-91cc-4e7f-ab1e-9c1ea7d24ac2-10_user.job','32');
DeleteFile('C:\Windows\Tasks\c7ee6271-91cc-4e7f-ab1e-9c1ea7d24ac2-1-7.job','32');
DeleteFile('C:\Windows\Tasks\c7ee6271-91cc-4e7f-ab1e-9c1ea7d24ac2-1-6.job','32');
DeleteFile('C:\Windows\Tasks\c76e571e-055a-4256-87f6-ab4215a22da4-7.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV26.07\c7ee6271-91cc-4e7f-ab1e-9c1ea7d24ac2-3.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV26.07\c7ee6271-91cc-4e7f-ab1e-9c1ea7d24ac2-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV26.07\c7ee6271-91cc-4e7f-ab1e-9c1ea7d24ac2-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV26.07\c7ee6271-91cc-4e7f-ab1e-9c1ea7d24ac2-7.exe','32');
DeleteFile('C:\Windows\Tasks\c7ee6271-91cc-4e7f-ab1e-9c1ea7d24ac2-7.job','32');
DeleteFile('C:\Windows\Tasks\c7ee6271-91cc-4e7f-ab1e-9c1ea7d24ac2-6.job','32');
DeleteFile('C:\Windows\Tasks\c7ee6271-91cc-4e7f-ab1e-9c1ea7d24ac2-5_user.job','32');
DeleteFile('C:\Windows\Tasks\c7ee6271-91cc-4e7f-ab1e-9c1ea7d24ac2-5.job','32');
DeleteFile('C:\Windows\Tasks\c7ee6271-91cc-4e7f-ab1e-9c1ea7d24ac2-3.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\ca7JdCQ7oY2kWNw0i.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\Ca93kkM.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-10.exe','32');
DeleteFile('C:\Windows\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-10_user.job','32');
DeleteFile('C:\Windows\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-1-6.job','32');
DeleteFile('C:\Windows\Tasks\Ca93kkM.job','32');
DeleteFile('C:\Windows\Tasks\ca7JdCQ7oY2kWNw0i.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-3.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV16.09\caf6752b-c61a-494b-bcb7-fd0c006d87be-6.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\cHPqbggYQWe6.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\cohBrFczmUu.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\CWcTMAt.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\CxbZpCJKkGi217llM3.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\CyZcPHFj.exe','32');
DeleteFile('C:\Windows\Tasks\CyZcPHFj.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\D4XgyqlLrX350KPbNl2doZmVZ.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV20.08\d84bf7de-2da2-4126-8657-1bb8a80f6f5b-10.exe','32');
DeleteFile('C:\Windows\Tasks\d84bf7de-2da2-4126-8657-1bb8a80f6f5b-10_user.job','32');
DeleteFile('C:\Windows\Tasks\D4XgyqlLrX350KPbNl2doZmVZ.job','32');
DeleteFile('C:\Windows\Tasks\CxbZpCJKkGi217llM3.job','32');
DeleteFile('C:\Windows\Tasks\CWcTMAt.job','32');
DeleteFile('C:\Windows\Tasks\cohBrFczmUu.job','32');
DeleteFile('C:\Windows\Tasks\cHPqbggYQWe6.job','32');
DeleteFile('C:\Windows\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-6.job','32');
DeleteFile('C:\Windows\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-5_user.job','32');
DeleteFile('C:\Windows\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-5.job','32');
DeleteFile('C:\Windows\Tasks\caf6752b-c61a-494b-bcb7-fd0c006d87be-3.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV20.08\d84bf7de-2da2-4126-8657-1bb8a80f6f5b-5.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\D9Pe8m442RhwsQQzrCZ1Iqp1y4.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\DFtH5q22S.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\DIaTAN2ZA1aVEBzwcuj1j.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\dL90OXW7BarHOXcPOlAaa.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\dOTUysoA6TuKhrzEz50cCbX.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\DwIdShkoSf0BUAD.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\E1qnJJspuNYoG5ZmPJJ.exe','32');
DeleteFile('C:\Windows\Tasks\E1qnJJspuNYoG5ZmPJJ.job','32');
DeleteFile('C:\Windows\Tasks\DwIdShkoSf0BUAD.job','32');
DeleteFile('C:\Windows\Tasks\dOTUysoA6TuKhrzEz50cCbX.job','32');
DeleteFile('C:\Windows\Tasks\dL90OXW7BarHOXcPOlAaa.job','32');
DeleteFile('C:\Windows\Tasks\DIaTAN2ZA1aVEBzwcuj1j.job','32');
DeleteFile('C:\Windows\Tasks\DFtH5q22S.job','32');
DeleteFile('C:\Windows\Tasks\D9Pe8m442RhwsQQzrCZ1Iqp1y4.job','32');
DeleteFile('C:\Windows\Tasks\d84bf7de-2da2-4126-8657-1bb8a80f6f5b-5_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV18.08\e2943860-5f7d-4983-a277-f2c7c4622ab1-1-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV18.08\e2943860-5f7d-4983-a277-f2c7c4622ab1-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV18.08\e2943860-5f7d-4983-a277-f2c7c4622ab1-3.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV18.08\e2943860-5f7d-4983-a277-f2c7c4622ab1-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV18.08\e2943860-5f7d-4983-a277-f2c7c4622ab1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV18.08\e2943860-5f7d-4983-a277-f2c7c4622ab1-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV10.08\e462d306-a9f1-40c3-b8a7-43607c337d34-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV10.08\e462d306-a9f1-40c3-b8a7-43607c337d34-1-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV10.08\e462d306-a9f1-40c3-b8a7-43607c337d34-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV10.08\e462d306-a9f1-40c3-b8a7-43607c337d34-3.exe','32');
DeleteFile('C:\Windows\Tasks\e462d306-a9f1-40c3-b8a7-43607c337d34-3.job','32');
DeleteFile('C:\Windows\Tasks\e462d306-a9f1-40c3-b8a7-43607c337d34-1-7.job','32');
DeleteFile('C:\Windows\Tasks\e462d306-a9f1-40c3-b8a7-43607c337d34-1-6.job','32');
DeleteFile('C:\Windows\Tasks\e2943860-5f7d-4983-a277-f2c7c4622ab1-7.job','32');
DeleteFile('C:\Windows\Tasks\e2943860-5f7d-4983-a277-f2c7c4622ab1-6.job','32');
DeleteFile('C:\Windows\Tasks\e2943860-5f7d-4983-a277-f2c7c4622ab1-5_user.job','32');
DeleteFile('C:\Windows\Tasks\e2943860-5f7d-4983-a277-f2c7c4622ab1-3.job','32');
DeleteFile('C:\Windows\Tasks\e2943860-5f7d-4983-a277-f2c7c4622ab1-10_user.job','32');
DeleteFile('C:\Windows\Tasks\e2943860-5f7d-4983-a277-f2c7c4622ab1-1-7.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV10.08\e462d306-a9f1-40c3-b8a7-43607c337d34-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV10.08\e462d306-a9f1-40c3-b8a7-43607c337d34-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV10.08\e462d306-a9f1-40c3-b8a7-43607c337d34-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV28.08\eb07d16e-559d-477b-a96c-1c91221c8de2-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV28.08\eb07d16e-559d-477b-a96c-1c91221c8de2-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV14.09\ed6a7513-1494-41cb-a12c-eae1559d75b9-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV14.09\ed6a7513-1494-41cb-a12c-eae1559d75b9-1-7.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV14.09\ed6a7513-1494-41cb-a12c-eae1559d75b9-10.exe','32');
DeleteFile('C:\Windows\Tasks\ed6a7513-1494-41cb-a12c-eae1559d75b9-10_user.job','32');
DeleteFile('C:\Windows\Tasks\ed6a7513-1494-41cb-a12c-eae1559d75b9-1-7.job','32');
DeleteFile('C:\Windows\Tasks\ed6a7513-1494-41cb-a12c-eae1559d75b9-1-6.job','32');
DeleteFile('C:\Windows\Tasks\eb07d16e-559d-477b-a96c-1c91221c8de2-5_user.job','32');
DeleteFile('C:\Windows\Tasks\eb07d16e-559d-477b-a96c-1c91221c8de2-10_user.job','32');
DeleteFile('C:\Windows\Tasks\e462d306-a9f1-40c3-b8a7-43607c337d34-7.job','32');
DeleteFile('C:\Windows\Tasks\e462d306-a9f1-40c3-b8a7-43607c337d34-6.job','32');
DeleteFile('C:\Windows\Tasks\e462d306-a9f1-40c3-b8a7-43607c337d34-5_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV14.09\ed6a7513-1494-41cb-a12c-eae1559d75b9-3.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV14.09\ed6a7513-1494-41cb-a12c-eae1559d75b9-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV14.09\ed6a7513-1494-41cb-a12c-eae1559d75b9-7.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\EDT4hN4aJB7gyOxZnOe9.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\EIP52JwUcQ.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\eMcQm2n.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\enGwb7zgG.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\eqxPO2CQdt.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\eSDYl98FAOsZIkX28S.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\Ew7qoelD7JN5Dpe4KtUKHP9Lrht.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\ez3KEyNEY6SjIvBKvc7oi.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\f07VoDnPT.exe','32');
DeleteFile('C:\Windows\Tasks\f07VoDnPT.job','32');
DeleteFile('C:\Windows\Tasks\ez3KEyNEY6SjIvBKvc7oi.job','32');
DeleteFile('C:\Windows\Tasks\eSDYl98FAOsZIkX28S.job','32');
DeleteFile('C:\Windows\Tasks\Ew7qoelD7JN5Dpe4KtUKHP9Lrht.job','32');
DeleteFile('C:\Windows\Tasks\eqxPO2CQdt.job','32');
DeleteFile('C:\Windows\Tasks\enGwb7zgG.job','32');
DeleteFile('C:\Windows\Tasks\eMcQm2n.job','32');
DeleteFile('C:\Windows\Tasks\EIP52JwUcQ.job','32');
DeleteFile('C:\Windows\Tasks\EDT4hN4aJB7gyOxZnOe9.job','32');
DeleteFile('C:\Windows\Tasks\ed6a7513-1494-41cb-a12c-eae1559d75b9-7.job','32');
DeleteFile('C:\Windows\Tasks\ed6a7513-1494-41cb-a12c-eae1559d75b9-6.job','32');
DeleteFile('C:\Windows\Tasks\ed6a7513-1494-41cb-a12c-eae1559d75b9-3.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV09.09\f5039a6b-52ec-4d2e-a9a7-0ca8b26ba408-1-6.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV09.09\f5039a6b-52ec-4d2e-a9a7-0ca8b26ba408-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV09.09\f5039a6b-52ec-4d2e-a9a7-0ca8b26ba408-3.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV09.09\f5039a6b-52ec-4d2e-a9a7-0ca8b26ba408-5.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV09.09\f5039a6b-52ec-4d2e-a9a7-0ca8b26ba408-6.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\f85TWsHkWfr56.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\fBp1DYVltMP6QdQOHXP.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\fcTX3dB3BSlG5XOUo6szCQ8rmV.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\FGQQ09ZY7AnewnuJmeT3.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\fpOkTFum8RdiyAg4uTU.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\FUXIUmqswbED8FtJcT1WKqdl1bF.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\FzOOSqQS1MTRBJ4TAMz5pXn.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\gB15y4sANDxwqUT2SPgu0t6TW.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\GD34eN9HnV0NjTnbgX.exe','32');
DeleteFile('C:\Windows\Tasks\GD34eN9HnV0NjTnbgX.job','32');
DeleteFile('C:\Windows\Tasks\gB15y4sANDxwqUT2SPgu0t6TW.job','32');
DeleteFile('C:\Windows\Tasks\FzOOSqQS1MTRBJ4TAMz5pXn.job','32');
DeleteFile('C:\Windows\Tasks\FUXIUmqswbED8FtJcT1WKqdl1bF.job','32');
DeleteFile('C:\Windows\Tasks\fpOkTFum8RdiyAg4uTU.job','32');
DeleteFile('C:\Windows\Tasks\FGQQ09ZY7AnewnuJmeT3.job','32');
DeleteFile('C:\Windows\Tasks\fcTX3dB3BSlG5XOUo6szCQ8rmV.job','32');
DeleteFile('C:\Windows\Tasks\fBp1DYVltMP6QdQOHXP.job','32');
DeleteFile('C:\Windows\Tasks\f85TWsHkWfr56.job','32');
DeleteFile('C:\Windows\Tasks\f5039a6b-52ec-4d2e-a9a7-0ca8b26ba408-6.job','32');
DeleteFile('C:\Windows\Tasks\f5039a6b-52ec-4d2e-a9a7-0ca8b26ba408-5_user.job','32');
DeleteFile('C:\Windows\Tasks\f5039a6b-52ec-4d2e-a9a7-0ca8b26ba408-5.job','32');
DeleteFile('C:\Windows\Tasks\f5039a6b-52ec-4d2e-a9a7-0ca8b26ba408-3.job','32');
DeleteFile('C:\Windows\Tasks\f5039a6b-52ec-4d2e-a9a7-0ca8b26ba408-10_user.job','32');
DeleteFile('C:\Windows\Tasks\f5039a6b-52ec-4d2e-a9a7-0ca8b26ba408-1-6.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\geTeUx8LV0.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\gFfZrmIFa5Zd2.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\gg7WSayvl6j9gOhzxe5N0YdbSBs.exe','32');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job','32');
DeleteFile('C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job','32');
DeleteFile('C:\Windows\Tasks\gg7WSayvl6j9gOhzxe5N0YdbSBs.job','32');
DeleteFile('C:\Windows\Tasks\gFfZrmIFa5Zd2.job','32');
DeleteFile('C:\Windows\Tasks\geTeUx8LV0.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\gLS8rWzDH9xsM5.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\GtMyvRk4iZzRpcfPI9s.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\gxjtThat4ic7QqHiTG91HOMtgLt.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\gXYouN7T.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\Gz2qsXCeVPXIdbqcnwLFpT.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\h3u2OaRyb6LEGogx87Ymx.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\HFV0zmcCTWu7bd2kG8.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\hh8HuhQQ4.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\hiQo18qZ8pEAu.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\hOO12Jl52T3.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\HtNaNiLkc64tIW4k7v.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\hxlZeZPKKLHWISXNarG.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\I1fYDyf.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\I2ml4ZMwSFdF4.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\i9BrNweqVa3vog6D.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\IaE3F4UwUSQ8MC3sVcdpn.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\IeKaS2EDDKPD1ZhDoxLXo.exe','32');
DeleteFile('C:\Windows\Tasks\IeKaS2EDDKPD1ZhDoxLXo.job','32');
DeleteFile('C:\Windows\Tasks\IaE3F4UwUSQ8MC3sVcdpn.job','32');
DeleteFile('C:\Windows\Tasks\i9BrNweqVa3vog6D.job','32');
DeleteFile('C:\Windows\Tasks\I2ml4ZMwSFdF4.job','32');
DeleteFile('C:\Windows\Tasks\I1fYDyf.job','32');
DeleteFile('C:\Windows\Tasks\hxlZeZPKKLHWISXNarG.job','32');
DeleteFile('C:\Windows\Tasks\HtNaNiLkc64tIW4k7v.job','32');
DeleteFile('C:\Windows\Tasks\hOO12Jl52T3.job','32');
DeleteFile('C:\Windows\Tasks\hiQo18qZ8pEAu.job','32');
DeleteFile('C:\Windows\Tasks\hh8HuhQQ4.job','32');
DeleteFile('C:\Windows\Tasks\HFV0zmcCTWu7bd2kG8.job','32');
DeleteFile('C:\Windows\Tasks\h3u2OaRyb6LEGogx87Ymx.job','32');
DeleteFile('C:\Windows\Tasks\Gz2qsXCeVPXIdbqcnwLFpT.job','32');
DeleteFile('C:\Windows\Tasks\gXYouN7T.job','32');
DeleteFile('C:\Windows\Tasks\gxjtThat4ic7QqHiTG91HOMtgLt.job','32');
DeleteFile('C:\Windows\Tasks\GtMyvRk4iZzRpcfPI9s.job','32');
DeleteFile('C:\Windows\Tasks\gLS8rWzDH9xsM5.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\ij4znLVpO0nctH.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\IgowAeZe.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\In7PitpM.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\iy3SrCaRNbP585.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\IzyVhBhe.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\j29OtvThhkBapYT4tbWRFKisR.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\J5daKgBZ9Eo7G5fbzfEsJi.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\Jdkh6OBxvfLp.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\JImrhNyyXLro4n93gdKY.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\jK1at55L1umv9beZk1HlsnBF0.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\JRn54io.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\Jut1TDkQKM5VbX952WdC5.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\JveNv2n07oxVCdycVW.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\JwAijxPqbzOKxmqt6VY4tua.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\JX4f54WGP2.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\jX6kEv15brWG.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\ke4gZ1J7m2gRNJ.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\KGXOQOXxre7EKQwpoITaYdG8j3.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\kHoTbpNp50lVtxBICl.exe','32');
DeleteFile('C:\Windows\Tasks\kHoTbpNp50lVtxBICl.job','32');
DeleteFile('C:\Windows\Tasks\KGXOQOXxre7EKQwpoITaYdG8j3.job','32');
DeleteFile('C:\Windows\Tasks\ke4gZ1J7m2gRNJ.job','32');
DeleteFile('C:\Windows\Tasks\jX6kEv15brWG.job','32');
DeleteFile('C:\Windows\Tasks\JX4f54WGP2.job','32');
DeleteFile('C:\Windows\Tasks\JwAijxPqbzOKxmqt6VY4tua.job','32');
DeleteFile('C:\Windows\Tasks\JveNv2n07oxVCdycVW.job','32');
DeleteFile('C:\Windows\Tasks\Jut1TDkQKM5VbX952WdC5.job','32');
DeleteFile('C:\Windows\Tasks\JRn54io.job','32');
DeleteFile('C:\Windows\Tasks\jK1at55L1umv9beZk1HlsnBF0.job','32');
DeleteFile('C:\Windows\Tasks\JImrhNyyXLro4n93gdKY.job','32');
DeleteFile('C:\Windows\Tasks\Jdkh6OBxvfLp.job','32');
DeleteFile('C:\Windows\Tasks\J5daKgBZ9Eo7G5fbzfEsJi.job','32');
DeleteFile('C:\Windows\Tasks\j29OtvThhkBapYT4tbWRFKisR.job','32');
DeleteFile('C:\Windows\Tasks\IzyVhBhe.job','32');
DeleteFile('C:\Windows\Tasks\iy3SrCaRNbP585.job','32');
DeleteFile('C:\Windows\Tasks\In7PitpM.job','32');
DeleteFile('C:\Windows\Tasks\ij4znLVpO0nctH.job','32');
DeleteFile('C:\Windows\Tasks\IgowAeZe.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\kLlDdo5sBty.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\kMBni0TBIfkoQl3sUSm.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\kmjCgDULHQ.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\knBxE7PdvzwDibQ1KWkWUxfOH.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\ktYH5qycgg.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\L5L9t4OGa2Lsin.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\LHsuL0WQoL7tkecKCz0.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\loVvqlQbH.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\lW9FEFw4k1psnLkFsQXgi9TJf5.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\LXIU3Y8.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\LzemRSwg.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\M4XvC6AP54V92qVtX.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\MCbSuiJo9zc3IRotNFB9nWfPiwT.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\mDeJiA73D9ETK9.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\MGO3JNEVHu2I4vr.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\Mm5Ssy6h72.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\MO8SiUr6LScZpAd.exe','32');
DeleteFile('C:\Windows\Tasks\Mm5Ssy6h72.job','32');
DeleteFile('C:\Windows\Tasks\MGO3JNEVHu2I4vr.job','32');
DeleteFile('C:\Windows\Tasks\mfOuMAPtC4P5gl0sOWnM.job','32');
DeleteFile('C:\Windows\Tasks\mDeJiA73D9ETK9.job','32');
DeleteFile('C:\Windows\Tasks\MCbSuiJo9zc3IRotNFB9nWfPiwT.job','32');
DeleteFile('C:\Windows\Tasks\M4XvC6AP54V92qVtX.job','32');
DeleteFile('C:\Windows\Tasks\LzemRSwg.job','32');
DeleteFile('C:\Windows\Tasks\LXIU3Y8.job','32');
DeleteFile('C:\Windows\Tasks\lW9FEFw4k1psnLkFsQXgi9TJf5.job','32');
DeleteFile('C:\Windows\Tasks\loVvqlQbH.job','32');
DeleteFile('C:\Windows\Tasks\LHsuL0WQoL7tkecKCz0.job','32');
DeleteFile('C:\Windows\Tasks\L5L9t4OGa2Lsin.job','32');
DeleteFile('C:\Windows\Tasks\ktYH5qycgg.job','32');
DeleteFile('C:\Windows\Tasks\knBxE7PdvzwDibQ1KWkWUxfOH.job','32');
DeleteFile('C:\Windows\Tasks\kmjCgDULHQ.job','32');
DeleteFile('C:\Windows\Tasks\kMBni0TBIfkoQl3sUSm.job','32');
DeleteFile('C:\Windows\Tasks\kLlDdo5sBty.job','32');
DeleteFile('C:\Windows\Tasks\MO8SiUr6LScZpAd.job','32');
DeleteFile('C:\Windows\Tasks\Mp2OGyF14Ba7.job','32');
DeleteFile('C:\Windows\Tasks\mPr8fXy8V2F6T049pv7VlbN1Sj.job','32');
DeleteFile('C:\Windows\Tasks\MQr5YzDAhuCfLqvJiz.job','32');
DeleteFile('C:\Windows\Tasks\MXD9mbHr4wLoHTi6YIa7GlC.job','32');
DeleteFile('C:\Windows\Tasks\N3bNDOIwbpzFhlRx2PXyN.job','32');
DeleteFile('C:\Windows\Tasks\n8QYTyuYjkkuMTmeB.job','32');
DeleteFile('C:\Windows\Tasks\namBhp4YSzWRdxl.job','32');
DeleteFile('C:\Windows\Tasks\NfMxfLcUfuKC5Q3.job','32');
DeleteFile('C:\Windows\Tasks\ntPAy4qiSBYchM.job','32');
DeleteFile('C:\Windows\Tasks\NX0sPK0fVSweTpSUIfwdRM.job','32');
DeleteFile('C:\Windows\Tasks\nyykM2Gm3lt45M71bGapw31uB.job','32');
DeleteFile('C:\Windows\Tasks\nzg9kBGFD1IP55C0.job','32');
DeleteFile('C:\Windows\Tasks\o9qXRV798VXRVpluCnRlaDZ.job','32');
DeleteFile('C:\Windows\Tasks\Oev6T7ROf6VffqbNI3Gbf31OzC.job','32');
DeleteFile('C:\Windows\Tasks\OkXIf9OGplJKAkerrKnqSWdyli.job','32');
DeleteFile('C:\Windows\Tasks\OPBz8COnO.job','32');
DeleteFile('C:\Windows\Tasks\OPDmzxsNP7B5E1eX6RoSZX.job','32');
DeleteFile('C:\Windows\Tasks\OVNf4pp0kHZBMEzQLF2u.job','32');
DeleteFile('C:\Windows\Tasks\P25DnansmhBqrwVOD9gEKBcW.job','32');
DeleteFile('C:\Windows\Tasks\PcQI86bkvpJSQO00Z38q6HEx.job','32');
DeleteFile('C:\Windows\Tasks\pf0IJaTZ1Vwhhpg8KSdmIwf.job','32');
DeleteFile('C:\Windows\Tasks\PgcOIVGlra5cUZVoUn11Z8p.job','32');
DeleteFile('C:\Windows\Tasks\pJkuKSoLrBzetkGZjC7MB.job','32');
DeleteFile('C:\Windows\Tasks\pqjvTDUbNVpC8SonxmXd1M7vt.job','32');
DeleteFile('C:\Windows\Tasks\PSmiOqahX69Amvw8f1PK.job','32');
DeleteFile('C:\Windows\Tasks\pSMVKGFQof.job','32');
DeleteFile('C:\Windows\Tasks\pvqtYlindNVR2KQJzr7LnI.job','32');
DeleteFile('C:\Windows\Tasks\pYDzOjp.job','32');
DeleteFile('C:\Windows\Tasks\pyge7cKzwJYByk4zihh4BckT.job','32');
DeleteFile('C:\Windows\Tasks\Q9QgEYmaALOO9bTLEIncrkmue.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\P25DnansmhBqrwVOD9gEKBcW.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\PcQI86bkvpJSQO00Z38q6HEx.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\pf0IJaTZ1Vwhhpg8KSdmIwf.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\PgcOIVGlra5cUZVoUn11Z8p.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\pJkuKSoLrBzetkGZjC7MB.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\pqjvTDUbNVpC8SonxmXd1M7vt.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\PSmiOqahX69Amvw8f1PK.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\pSMVKGFQof.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\pvqtYlindNVR2KQJzr7LnI.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\pYDzOjp.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\pyge7cKzwJYByk4zihh4BckT.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\Q9QgEYmaALOO9bTLEIncrkmue.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\QBTt7ob7poR.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\qDO3S83ScVRfdESohzFn.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\QDZ5zxOFjs2R2rXf9j2Dn.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\qha7DFNWFLK9VyTQjKlQI.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\QmalcEUn4JPVbFOs3yyk.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\QSMYbHKoNdpOTcLAR.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\QUguno20Wv.exe','32');
DeleteFile('C:\Windows\Tasks\QUguno20Wv.job','32');
DeleteFile('C:\Windows\Tasks\QSMYbHKoNdpOTcLAR.job','32');
DeleteFile('C:\Windows\Tasks\QmalcEUn4JPVbFOs3yyk.job','32');
DeleteFile('C:\Windows\Tasks\qha7DFNWFLK9VyTQjKlQI.job','32');
DeleteFile('C:\Windows\Tasks\QDZ5zxOFjs2R2rXf9j2Dn.job','32');
DeleteFile('C:\Windows\Tasks\qDO3S83ScVRfdESohzFn.job','32');
DeleteFile('C:\Windows\Tasks\QDJCQO8fu62DVCyOBb12SDd5qM0.job','32');
DeleteFile('C:\Windows\Tasks\QBTt7ob7poR.job','32');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
Будет выполнена перезагрузка компьютера.

 

Выполните скрипт в AVZ

 

begin
CreateQurantineArchive('c:\quarantine.zip');
end.
c:\quarantine.zip отправьте по адресу newvirus@kaspersky.com

Полученный ответ сообщите здесь (с указанием номера KLAN)

 

Выполните правила ЕЩЕ РАЗ и предоставьте НОВЫЕ логи

  • Спасибо (+1) 1
  • Согласен 1
Ссылка на комментарий
Поделиться на другие сайты
thyrex Мудрец

thyrex

Опубликовано
Опубликовано

Где ж ей исчезнуть, если у Вас столько мусора, что рука устала составлять первый скрипт )))

 

Выполните скрипт в AVZ

 

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
then
  begin
   SearchRootkit(true, true);
   SetAVZGuardStatus(True);
  end;
QuarantineFile('C:\Users\user\AppData\Roaming\ZM9qxHV9f3yKtgfx4ea.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\ZDCOgfyjF.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\y4h5XCEuV.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\XxparYEpqNU3C6ZVaAD.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\xIdTj3hHx1o.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\XGxmgiNtUupa8.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\X4iNAaDugqd8Xz3VROxNSVh8e.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\wfgXHGu6s9d48.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\wBNdb7TLSbO.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\W9jauL5IvbHSOIa7rp.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\uwGYo8ggx9.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\u6TOdPUjJta4a79GegdieNQAHy.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\U6eB6p3zGoYpjO4UnGnd.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\tvQKlXls9B.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\SNvvYyEvIYsLPcmuCppM3m.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\S9imEMaaO.exe','');
QuarantineFile('C:\Users\user\AppData\Roaming\S9G2VNWAkJS.exe','');
DeleteFile('C:\Users\user\AppData\Roaming\2eO7UFRGk5.exe','32');
DeleteFile('C:\Windows\Tasks\2eO7UFRGk5.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV12.09\2f2ea746-31c3-426b-b937-376963036470-10.exe','32');
DeleteFile('C:\Windows\Tasks\2f2ea746-31c3-426b-b937-376963036470-10_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV23.07\8b75a6a8-54ef-498c-a38d-685a2cd61b97-10.exe','32');
DeleteFile('C:\Windows\Tasks\8b75a6a8-54ef-498c-a38d-685a2cd61b97-10_user.job','32');
DeleteFile('C:\Windows\Tasks\a7f75f13-1f29-4638-9450-5447035246f0-5_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV31.08\a7f75f13-1f29-4638-9450-5447035246f0-5.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\BzWnglONaJnpKKv5dsN.exe','32');
DeleteFile('C:\Windows\Tasks\BzWnglONaJnpKKv5dsN.job','32');
DeleteFile('C:\Windows\Tasks\e462d306-a9f1-40c3-b8a7-43607c337d34-10_user.job','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV10.08\e462d306-a9f1-40c3-b8a7-43607c337d34-10.exe','32');
DeleteFile('C:\Program Files (x86)\CiPlus-4.5vV10.08\e462d306-a9f1-40c3-b8a7-43607c337d34-5.exe','32');
DeleteFile('C:\Windows\Tasks\e462d306-a9f1-40c3-b8a7-43607c337d34-5.job','32');
DeleteFile('C:\Windows\Tasks\Qw3hS30H.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\Qw3hS30H.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\qw8HrReb05tONoJ6zCM0pHCxwC3.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\R2oWAdJvcy8VcYaSRLaNF.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\ra0zUvImU0gMDK1mivo.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\RABYOnR3ENbySfV1VMziV1iM48.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\rB4I0zM3URw.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\rg9v2d06Mou7o7ihxMKSQciN.exe','32');
DeleteFile('C:\Windows\Tasks\rg9v2d06Mou7o7ihxMKSQciN.job','32');
DeleteFile('C:\Windows\Tasks\rB4I0zM3URw.job','32');
DeleteFile('C:\Windows\Tasks\RABYOnR3ENbySfV1VMziV1iM48.job','32');
DeleteFile('C:\Windows\Tasks\ra0zUvImU0gMDK1mivo.job','32');
DeleteFile('C:\Windows\Tasks\R2oWAdJvcy8VcYaSRLaNF.job','32');
DeleteFile('C:\Windows\Tasks\qw8HrReb05tONoJ6zCM0pHCxwC3.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\rgZqeSgrgLuWT8Xf.exe','32');
DeleteFile('C:\Windows\Tasks\rgZqeSgrgLuWT8Xf.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\RNGeD7w.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\rT4vargt9SX7DupWMV.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\RWMFPY2y.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\RZ3IWet8fCkWJQ.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\S9G2VNWAkJS.exe','32');
DeleteFile('C:\Windows\Tasks\S9G2VNWAkJS.job','32');
DeleteFile('C:\Windows\Tasks\RZ3IWet8fCkWJQ.job','32');
DeleteFile('C:\Windows\Tasks\RWMFPY2y.job','32');
DeleteFile('C:\Windows\Tasks\rT4vargt9SX7DupWMV.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\S9imEMaaO.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\SaoYN3kMGf.exe','32');
DeleteFile('C:\Windows\Tasks\S9imEMaaO.job','32');
DeleteFile('C:\Windows\Tasks\SaoYN3kMGf.job','32');
DeleteFile('C:\Windows\Tasks\SdZTExahdwzHSz0y07Hb3xUzbno.job','32');
DeleteFile('C:\Windows\Tasks\sjr8l8N7Bs.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\SdZTExahdwzHSz0y07Hb3xUzbno.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\sjr8l8N7Bs.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\SNvvYyEvIYsLPcmuCppM3m.exe','32');
DeleteFile('C:\Windows\Tasks\SPy5Bpe.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\SPy5Bpe.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\SQcGKFQnVpMdOBDmTD9.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\sQxCeFf6e8swZnVpsAkj.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\T0oUm0VrIrtu8YHHm5EXk0g7.exe','32');
DeleteFile('C:\Windows\Tasks\T0oUm0VrIrtu8YHHm5EXk0g7.job','32');
DeleteFile('C:\Windows\Tasks\sQxCeFf6e8swZnVpsAkj.job','32');
DeleteFile('C:\Windows\Tasks\SQcGKFQnVpMdOBDmTD9.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\tCcA0sORwjzXyHGNecfNMnsY55I.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\tk7QtWKpHjo9fI.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\tMU2rnh3VySslWrADO.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\tokgcWZKwR2ydnUzgroWfingGL.exe','32');
DeleteFile('C:\Windows\Tasks\tokgcWZKwR2ydnUzgroWfingGL.job','32');
DeleteFile('C:\Windows\Tasks\tMU2rnh3VySslWrADO.job','32');
DeleteFile('C:\Windows\Tasks\tk7QtWKpHjo9fI.job','32');
DeleteFile('C:\Windows\Tasks\tCcA0sORwjzXyHGNecfNMnsY55I.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\TVG6Dwf2XF9l7ijYPXbjhq2z.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\tvQKlXls9B.exe','32');
DeleteFile('C:\Windows\Tasks\tvQKlXls9B.job','32');
DeleteFile('C:\Windows\Tasks\TVG6Dwf2XF9l7ijYPXbjhq2z.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\U0pyTPp1CTAWLG9CJ.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\u34KxgHWDvfcYIy66cavc0hxb.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\u3IAkG3bynzmJNOkvh.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\U6eB6p3zGoYpjO4UnGnd.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\u6TOdPUjJta4a79GegdieNQAHy.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\U9FVgmqYCulOyxRowmqxUqm.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\uAJ98vRJf1UX57Yg.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\UciVQbsWZH56AG1bKn.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\udjZdvvMSHxVnQjz65.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\UGQWXl8KL13zYQaIzfVT.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\uIvMgOBxqJYwv.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\uwGYo8ggx9.exe','32');
DeleteFile('C:\Windows\Tasks\uwGYo8ggx9.job','32');
DeleteFile('C:\Windows\Tasks\uIvMgOBxqJYwv.job','32');
DeleteFile('C:\Windows\Tasks\UGQWXl8KL13zYQaIzfVT.job','32');
DeleteFile('C:\Windows\Tasks\udjZdvvMSHxVnQjz65.job','32');
DeleteFile('C:\Windows\Tasks\UciVQbsWZH56AG1bKn.job','32');
DeleteFile('C:\Windows\Tasks\uAJ98vRJf1UX57Yg.job','32');
DeleteFile('C:\Windows\Tasks\U9FVgmqYCulOyxRowmqxUqm.job','32');
DeleteFile('C:\Windows\Tasks\u6TOdPUjJta4a79GegdieNQAHy.job','32');
DeleteFile('C:\Windows\Tasks\U6eB6p3zGoYpjO4UnGnd.job','32');
DeleteFile('C:\Windows\Tasks\u3IAkG3bynzmJNOkvh.job','32');
DeleteFile('C:\Windows\Tasks\u34KxgHWDvfcYIy66cavc0hxb.job','32');
DeleteFile('C:\Windows\Tasks\U0pyTPp1CTAWLG9CJ.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\uxKpNpyW7G3mc3XbLzA6XDqVVe.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\V0cFuBU4p9pE7IzvUKQ0863wy.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\VBqV4sU4NIxA.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\VCHOvZsY5ZBXnBIoToJiK59PQa.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\VgJ4MObgzXzAQf03n3.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\viEVspuWti0lq.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\VJdWvKukXN6yypkyS3AgnbE.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\vJJgIK2X9mSZxtgKggSoQxYw.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\vKedbWgSOZgDsi.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\VLBtw7OaPr6hSP38puhL.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\vpXtk5xu50Jmlaq35biFMGEy592.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\vwIiVIK6D.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\vwWwAn5OK4D7S2KqR90Ym.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\vyIIl79m2BEF5fzjwWX63RwUI61.exe','32');
DeleteFile('C:\Windows\Tasks\vyIIl79m2BEF5fzjwWX63RwUI61.job','32');
DeleteFile('C:\Windows\Tasks\vwWwAn5OK4D7S2KqR90Ym.job','32');
DeleteFile('C:\Windows\Tasks\vwIiVIK6D.job','32');
DeleteFile('C:\Windows\Tasks\vpXtk5xu50Jmlaq35biFMGEy592.job','32');
DeleteFile('C:\Windows\Tasks\VLBtw7OaPr6hSP38puhL.job','32');
DeleteFile('C:\Windows\Tasks\vKedbWgSOZgDsi.job','32');
DeleteFile('C:\Windows\Tasks\vJJgIK2X9mSZxtgKggSoQxYw.job','32');
DeleteFile('C:\Windows\Tasks\VJdWvKukXN6yypkyS3AgnbE.job','32');
DeleteFile('C:\Windows\Tasks\viEVspuWti0lq.job','32');
DeleteFile('C:\Windows\Tasks\VgJ4MObgzXzAQf03n3.job','32');
DeleteFile('C:\Windows\Tasks\VCHOvZsY5ZBXnBIoToJiK59PQa.job','32');
DeleteFile('C:\Windows\Tasks\VBqV4sU4NIxA.job','32');
DeleteFile('C:\Windows\Tasks\V0cFuBU4p9pE7IzvUKQ0863wy.job','32');
DeleteFile('C:\Windows\Tasks\uxKpNpyW7G3mc3XbLzA6XDqVVe.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\W6cpfaECbQe1DsZyWg7zsLrJ.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\w6drB3f1E.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\w9FsBWXS1IRhud.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\W9jauL5IvbHSOIa7rp.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\W9TInsb3nVXOQ.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\wacEmCKqsirFCCyidBfu3HXdt.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\wb4bVkep7w4ZsMqs.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\wBNdb7TLSbO.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\wfgXHGu6s9d48.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\WfzneutmJiK.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\WhIqcWX5n.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\wkrstuuwgDItCXHv.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\wlXictH.exe','32');
DeleteFile('C:\Windows\Tasks\wlXictH.job','32');
DeleteFile('C:\Windows\Tasks\wkrstuuwgDItCXHv.job','32');
DeleteFile('C:\Windows\Tasks\WhIqcWX5n.job','32');
DeleteFile('C:\Windows\Tasks\WfzneutmJiK.job','32');
DeleteFile('C:\Windows\Tasks\wfgXHGu6s9d48.job','32');
DeleteFile('C:\Windows\Tasks\wBNdb7TLSbO.job','32');
DeleteFile('C:\Windows\Tasks\wb4bVkep7w4ZsMqs.job','32');
DeleteFile('C:\Windows\Tasks\wacEmCKqsirFCCyidBfu3HXdt.job','32');
DeleteFile('C:\Windows\Tasks\W9TInsb3nVXOQ.job','32');
DeleteFile('C:\Windows\Tasks\W9jauL5IvbHSOIa7rp.job','32');
DeleteFile('C:\Windows\Tasks\w9FsBWXS1IRhud.job','32');
DeleteFile('C:\Windows\Tasks\w6drB3f1E.job','32');
DeleteFile('C:\Windows\Tasks\W6cpfaECbQe1DsZyWg7zsLrJ.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\X3wVzbE.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\X4iNAaDugqd8Xz3VROxNSVh8e.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\XGxmgiNtUupa8.exe','32');
DeleteFile('C:\Windows\Tasks\XGxmgiNtUupa8.job','32');
DeleteFile('C:\Windows\Tasks\X4iNAaDugqd8Xz3VROxNSVh8e.job','32');
DeleteFile('C:\Windows\Tasks\X3wVzbE.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\xIdTj3hHx1o.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\xj6v14dk7wRBNGP.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\XlJBjZWv2qAGxP2n6QxmfKer3r.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\xlyZKtvNunpeidBZ9zVX.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\xmREYdChSSCCtJG.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\Xq3Ef2WennmP8CYV4Hb17M.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\Xs20P50.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\xwQtb5xd3K.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\XxparYEpqNU3C6ZVaAD.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\XyLhr2w.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\XyQGtCemPgms.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\xZ9GTRIZPIPPUBFfG9.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\XZpw4y4Y6CfvYX7Ma.exe','32');
DeleteFile('C:\Windows\Tasks\XZpw4y4Y6CfvYX7Ma.job','32');
DeleteFile('C:\Windows\Tasks\xZ9GTRIZPIPPUBFfG9.job','32');
DeleteFile('C:\Windows\Tasks\XyQGtCemPgms.job','32');
DeleteFile('C:\Windows\Tasks\XyLhr2w.job','32');
DeleteFile('C:\Windows\Tasks\XxparYEpqNU3C6ZVaAD.job','32');
DeleteFile('C:\Windows\Tasks\xwQtb5xd3K.job','32');
DeleteFile('C:\Windows\Tasks\Xs20P50.job','32');
DeleteFile('C:\Windows\Tasks\Xq3Ef2WennmP8CYV4Hb17M.job','32');
DeleteFile('C:\Windows\Tasks\xmREYdChSSCCtJG.job','32');
DeleteFile('C:\Windows\Tasks\xlyZKtvNunpeidBZ9zVX.job','32');
DeleteFile('C:\Windows\Tasks\XlJBjZWv2qAGxP2n6QxmfKer3r.job','32');
DeleteFile('C:\Windows\Tasks\xj6v14dk7wRBNGP.job','32');
DeleteFile('C:\Windows\Tasks\xIdTj3hHx1o.job','32');
DeleteFile('C:\Users\user\AppData\Roaming\y4h5XCEuV.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\YA5e4Qe.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\Yv4F6TmQ9jNO9AY4f3vMl.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\yW9TQX2SvaxRSgeX7cYsLD.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\yZ8qfKzeHxBEXsOQp.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\z8C4CQ0NSDGJLFX0WnQByvBy.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\ZDCOgfyjF.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\ZixFZRfKtBfr2a.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\ZM9qxHV9f3yKtgfx4ea.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\zPI2dOjV.exe','32');
DeleteFile('C:\Users\user\AppData\Roaming\zsQvZ9vjx.exe','32');
DeleteFile('C:\Windows\Tasks\zsQvZ9vjx.job','32');
DeleteFile('C:\Windows\Tasks\zPI2dOjV.job','32');
DeleteFile('C:\Windows\Tasks\ZM9qxHV9f3yKtgfx4ea.job','32');
DeleteFile('C:\Windows\Tasks\ZixFZRfKtBfr2a.job','32');
DeleteFile('C:\Windows\Tasks\ZDCOgfyjF.job','32');
DeleteFile('C:\Windows\Tasks\z8C4CQ0NSDGJLFX0WnQByvBy.job','32');
DeleteFile('C:\Windows\Tasks\yZ8qfKzeHxBEXsOQp.job','32');
DeleteFile('C:\Windows\Tasks\yW9TQX2SvaxRSgeX7cYsLD.job','32');
DeleteFile('C:\Windows\Tasks\Yv4F6TmQ9jNO9AY4f3vMl.job','32');
DeleteFile('C:\Windows\Tasks\YA5e4Qe.job','32');
DeleteFile('C:\Windows\Tasks\y4h5XCEuV.job','32');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.
Будет выполнена перезагрузка компьютера.

 

Выполните скрипт в AVZ

 

begin
CreateQurantineArchive('c:\quarantine.zip');
end.
c:\quarantine.zip отправьте по адресу newvirus@kaspersky.com

Полученный ответ сообщите здесь (с указанием номера KLAN)

 

Выполните правила ЕЩЕ РАЗ и предоставьте НОВЫЕ логи

  • Согласен 1
Ссылка на комментарий
Поделиться на другие сайты
thyrex Мудрец

thyrex

Опубликовано
Опубликовано

Удалите в МВАМ все, кроме

PUP.Optional.OpenCandy, F:\Документы\Херабуна\1\PhotoScape_V3.7.exe, , [183589aafe8d0531e0e38e0db55054ac], PUP.PSWTool.ProductKey, C:\Activators\KMSAuto Pro 1.25.1 Portable\bin\pdk.dll, , [da73bf74d3b863d3641f066aa25e13ed], 
HackTool.Agent, C:\Activators\Windows Loader 2.2.1 by Daz\Windows Loader 2.2.1 by Daz.exe, , [d47950e3771447efa8c75754be43f709], 
HackTool.Agent, C:\Активатор\Windows Loader 2.2.1 by Daz.exe, , [8cc1270c6c1fea4c8ae52d7e58a9dc24],
Ссылка на комментарий
Поделиться на другие сайты
thyrex Мудрец

thyrex

Опубликовано
Опубликовано

Это еще не всё :)

 

Скачайте Farbar Recovery Scan Tool NAAC5Ba.png и сохраните на Рабочем столе.
 
  • Примечание: необходимо выбрать версию, совместимую с Вашей операционной системой. Если Вы не уверены, какая версия подойдет для Вашей системы, скачайте обе и попробуйте запустить. Только одна из них запустится на Вашей системе.

1. Запустите программу двойным щелчком. Когда программа запустится, нажмите Yes для соглашения с предупреждением.
2. Убедитесь, что в окне Optional Scan отмечены "List BCD" и "Driver MD5".
B92LqRQ.png
3. Нажмите кнопку Scan.
4. После окончания сканирования будет создан отчет (FRST.txt) в той же папке, откуда была запущена программа. Пожалуйста, прикрепите отчет в следующем сообщении.
5. Если программа была запущена в первый раз, также будет создан отчет (Addition.txt). Пожалуйста, прикрепите его в следующем сообщении.
Ссылка на комментарий
Поделиться на другие сайты

Пожалуйста, войдите, чтобы комментировать

Вы сможете оставить комментарий после входа в



Войти
 Share
Перейти к списку тем

  • Похожий контент

    • VinZy
      Вернуть окно свойств
      От VinZy
      Всем привет!
      А  кто знает как это окно вернуть? См. скрин... А то на крестик нажал случайно  и пипец, не пойму как вернуть :))))
       
       
       
       

    • Кристина1983
      По электронной почте прислали вредоносный файл
      От Кристина1983
      Здравствуйте! Вчера по электронной почте пришел вредоносный файл, якобы Накладная.pdf, но файл был не PDF, просто маскировался. Письмо из почты удалила, при попытке почистить папку удаленные, через несколько секунд это удаленное письмо в удаленных восстанавливалось (почтовый клиент Thunderbird). Касперским проверила лог прилагаю, но в почтовом клиенте опять в удаленных было это письмо. Снова запустила утилиту Касперского с полной проверкой. Было проведено лечение с перезагрузкой.
      Прошу проверить остались ли вредоносные следы в системе? 
       
      Логи Kaspersky Virus Removal Tool Reports.rar
      Логи AutoLogger, после того как отработал Kaspersky Virus Removal Tool
      CollectionLog-2025.02.06-15.12.zip
    • vlanzzy
      Вредоносное заражение с task.vbs
      От vlanzzy
      CollectionLog-2024.12.19-19.35.zip
      Произошло заражение вирусом, выполнял проверку через KVRT и смог удалить вирусы, но теперь запускается task.vbs
       
    • Flsss
      Часто выскакивает окно о зашифрованном соединении taskhostw.exe
      От Flsss
      В последнее время часто выскакивает "Невозможно гарантировать подлинность домена.." В имени приложения написано taskhostw.exe 
      Хотелось бы узнать, это что-то плохое или всё ок? Всё было отсканировано Dr.Web, AV block remover, естественно касперским pure, а также kaspersky virus removal tool. Были просмотрены файлы HKEY_ (вбивая w+r regedit). Но всё равно хотелось бы удостовериться, так как до сих пор выскакивает это окно, + ко всему недавно был обнаружен майнер разрабами минигры Minecraft сервера cristallix и хотелось бы лишний раз удостовериться, потому что я в этом не бум-бум.

      CollectionLog-2025.01.24-22.12.zip
    • Snake200221
      PowerShell пытается перекинуть на вредоносную ссылку
      От Snake200221
      Здравствуйте, при включении компьютера и окончательном входе в систему PowerShell пытается перекинуть на вредоносную ссылку. Касперский сразу же блокирует
       
      Также недавно активировал систему командой в сmd, а именно "powershell iex (irm 'activated.run/key')". Может быть это она спровоцировала данную проблему 
      CollectionLog-2025.01.04-00.02.zip
×
×
  • Создать...