Cytuj:
:OTL
MOD - [2011-10-31 12:44:12 | 000,118,784 | RHS- | M] () -- C:\WINDOWS\system32\mgking0.dll
O4 - HKU\S-1-5-21-484763869-606747145-839522115-1004..\Run: [king_mg] C:\WINDOWS\system32\mgking.exe ()
O32 - AutoRun File - [2011-10-31 12:18:47 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2011-10-31 13:10:16 | 000,000,051 | RHS- | M] () - C:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{a084bf66-03b5-11e1-ad69-001a4d9e2455}\Shell\AutoRun\command - "" = K:\w9.exe
O33 - MountPoints2\{a084bf66-03b5-11e1-ad69-001a4d9e2455}\Shell\open\Command - "" = K:\w9.exe
[2011-10-31 12:44:39 | 000,182,272 | RHS- | C] () -- C:\w9.exe
[2011-10-31 12:44:39 | 000,000,051 | RHS- | C] () -- C:\autorun.inf
[2011-10-31 12:44:12 | 000,182,272 | RHS- | C] () -- C:\WINDOWS\System32\mgking.exe
[2011-10-31 12:44:12 | 000,118,784 | RHS- | C] () -- C:\WINDOWS\System32\mgking0.dll
:Files
w9.exe /alldrives
:Commands
[EMPTYTEMP]
[EMPTYFLASH]
[RESETHOSTS]
I nacisniej wykonaj skrypt.