502 Bad Gateway nginx/1.4.6 " style="display: none;">

begin
ShowMessage('Внимание! Перед выполнением скрипта AVZ автоматически закроет все сетевые подключения.' + #13#10 + 'После перезагрузки компьютера подключения к сети будут восстановлены в автоматическом режиме.');
ExecuteFile('net.exe', 'stop tcpip /y', 0, 15000, true);
if not IsWOW64
 then
  begin
   SearchRootkit(true, true);
   SetAVZGuardStatus(True);
  end;
TerminateProcessByName('c:\users\Максим\appdata\local\drivernativeregister\addonapitrash.exe');
 TerminateProcessByName('c:\users\Максим\appdata\local\dashboarddocklog\dashboarddocklog.exe');
 TerminateProcessByName('c:\users\Максим\appdata\local\drivernativeregister\drivernativeregister.exe');
 TerminateProcessByName('c:\windows\syswow64\lnsecsl.exe');
 TerminateProcessByName('c:\windows\temp\mrtc80f.tmp\stdrt.exe');
 SetServiceStart('DriverNativeRegister.exe', 4);
 SetServiceStart('DashboardDockLog.exe', 4);
QuarantineFile('C:\Users\Максим\AppData\Roaming\newSI_23\s_inst.exe','');
 QuarantineFile('C:\Users\Максим\AppData\Local\DriverNativeRegister\RgFltX64.sys','');
 QuarantineFile('C:\Users\Максим\AppData\Local\MySQLRecycleUtility\MySQLRecycleUtility.exe','');
 QuarantineFile('C:\Users\Максим\AppData\Local\InterpreterRootSnapshot\InterpreterRootSnapshot.exe','');
 QuarantineFile('C:\Users\Максим\AppData\Local\ExportFirmwareProcess\ExportFirmwareProcess.exe','');
 QuarantineFile('c:\windows\temp\mrtc80f.tmp\stdrt.exe','');
 QuarantineFile('c:\windows\syswow64\lnsecsl.exe','');
 QuarantineFile('c:\users\Максим\appdata\local\drivernativeregister\drivernativeregister.exe','');
 QuarantineFile('c:\users\Максим\appdata\local\dashboarddocklog\dashboarddocklog.exe','');
 QuarantineFile('c:\users\Максим\appdata\local\drivernativeregister\addonapitrash.exe','');
 DeleteFile('c:\users\Максим\appdata\local\drivernativeregister\addonapitrash.exe','32');
 DeleteFile('c:\users\Максим\appdata\local\dashboarddocklog\dashboarddocklog.exe','32');
 DeleteFile('c:\windows\syswow64\lnsecsl.exe','32');
 DeleteFile('c:\windows\temp\mrtc80f.tmp\stdrt.exe','32');
 DeleteFile('C:\Users\Максим\AppData\Local\ExportFirmwareProcess\ExportFirmwareProcess.exe','32');
 DeleteFile('C:\Users\Максим\AppData\Local\InterpreterRootSnapshot\InterpreterRootSnapshot.exe','32');
 DeleteFile('C:\Users\Максим\AppData\Local\DriverNativeRegister\RgFltX64.sys','32');
 DeleteFile('C:\Users\Максим\AppData\Roaming\newSI_23\s_inst.exe','32');
 DeleteFile('C:\Windows\Tasks\newSI_23.job','64');
DeleteService('InterpreterRootSnapshot.exe');
 DeleteService('DashboardDockLog.exe');
 DeleteService('DriverNativeRegister.exe');
 DeleteService('AddonClipboardDebug.exe');
 DeleteService('Adobe Licensing Console');
DeleteFileMask('c:\windows\temp\mrtc80f.tmp', '*', true);
DeleteDirectory('c:\windows\temp\mrtc80f.tmp');
DeleteFileMask('c:\users\Максим\appdata\local\dashboarddocklog', '*', true);
DeleteDirectory('c:\users\Максим\appdata\local\dashboarddocklog');
DeleteFileMask('C:\Users\Максим\AppData\Local\DriverNativeRegister', '*', true);
DeleteDirectory('C:\Users\Максим\AppData\Local\DriverNativeRegister');
DeleteFileMask('C:\Users\Максим\AppData\Roaming\newSI_23', '*', true);
DeleteDirectory('C:\Users\Максим\AppData\Roaming\newSI_23');
 BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(false);
end.

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://hptds6.ru/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://yamdex.net/?searchid=1&l10n=ru&fromsearch=1&imsid=9af33b4840e8e76fc04e84e636410a88&text={searchTerms}
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://inca.im/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://yamdex.net/?searchid=1&l10n=ru&fromsearch=1&imsid=9af33b4840e8e76fc04e84e636410a88&text={searchTerms}
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:26829
O2 - BHO: Спутник@Mail.Ru - {8984B388-A5BB-4DF7-B274-77B879E179DB} - (no file)
O2 - BHO: AdobeFlashStable - {D0123838-675F-43DC-9D4C-58498D4D84C9} - (no file)
O2 - BHO: (no name) - {D5FEC983-01DB-414a-9456-AF95AC9ED7B5} - (no file)
O4 - HKCU\..\Run: [Zaxar Games Browser] C:\Program Files\Zaxar\ZaxarLoader.exe /verysilent

begin
CreateQurantineArchive('c:\quarantine.zip');
end.

KillAll::

File::
C:\Users\Максим\AppData\Local\MySQLRecycleUtility\MySQLRecycleUtility.exe
C:\Users\Максим\AppData\Local\DriverNativeRegister\RgFltX64.sys
c:\users\Максим\appdata\local\drivernativeregister\addonapitrash.exe
c:\users\Максим\appdata\local\dashboarddocklog\dashboarddocklog.exe
c:\users\Максим\appdata\local\drivernativeregister\drivernativeregister.exe

Driver::
RgFltX64
DriverNativeRegister.exe
MySQLRecycleUtility.exe

Folder::
c:\users\Максим\appdata\local\drivernativeregister
c:\users\Максим\appdata\local\dashboarddocklog


DDS::
uInternet Settings,ProxyServer = http=127.0.0.1:30167

FileLook::

DirLook::
C:\Users\Максим\AppData\Local\InterpreterRootSnapshot
C:\Users\Максим\AppData\Local\MySQLRecycleUtility
C:\Users\Максим\AppData\Local\ExportFirmwareProcess