Вирус требует отправить смс

# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host
 
# localhost name resolution is handled within DNS itself.
#       127.0.0.1       localhost
#       ::1             localhost
-- 
-- 
-- 

begin
SetAVZGuardStatus(True);
SearchRootkit(true, true);
 QuarantineFile('c:\windows\help\svchost.exe',''); 
 QuarantineFile('E:\autorun.wsh','');
 QuarantineFile('C:\WINDOWS\system32\servises.exe','');
 QuarantineFile('C:\WINDOWS\fd.dll','');
 QuarantineFile('C:\WINDOWS\system32\drivers\EagleNT.sys','');
 QuarantineFile('C:\Documents and Settings\PLaHeTa_3eML9.K-O-P-BL-T-O.000\Рабочий стол\10E9F7E4648A19E0\10E9F7E4648A19E0','');
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
TerminateProcessByName('c:\windows\help\svchost.exe');
DeleteFile('c:\windows\help\svchost.exe');
DeleteFile('C:\Documents and Settings\PLaHeTa_3eML9.K-O-P-BL-T-O.000\Рабочий стол\10E9F7E4648A19E0\10E9F7E4648A19E0');
DeleteFile('C:\WINDOWS\system32\servises.exe');
DeleteFile('E:\autorun.wsh');
BC_DeleteSvc('10E9F7E4648A19E0');
BC_DeleteSvc('r_server');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.