I can't unlock show hidden files option. Could you look at my log. Corrected
I have scanned all my discs (9hrs :/) with kaspersky vir remowing tool and deleted over 9000 files ! but the problem still exists :/
I can't unlock show hidden files option. Could you look at my log. Corrected
I have scanned all my discs (9hrs :/) with kaspersky vir remowing tool and deleted over 9000 files ! but the problem still exists :/
Последний раз редактировалось Rene-gad; 24.10.2008 в 12:13.
pls. make 3 log flies in accordance with our rules: http://virusinfo.info/showthread.php?t=9184
Could you look at 1st post now
Here it are, my fail
Sorry for pressig, but I think now everything is ok, can somebody help me,please.
Последний раз редактировалось Rene-gad; 25.10.2008 в 17:51.
Attention !!! Database was last updated 2008-04-06 it is necessary to update the bases using automatic updates (File/Database update)
Switch off:
- Antivirus and and, if you have - Firewall.
- System Restore
- Execute following script
After reboot:Код:begin SearchRootkit(true, true); SetAVZGuardStatus(True); QuarantineFile('SWREG.cfexe',''); TerminateProcessByName('SWREG.cfexe'); QuarantineFile('C:\autorun.inf',''); QuarantineFile('D:\autorun.inf',''); QuarantineFile('E:\autorun.inf',''); DeleteFile('E:\autorun.inf'); DeleteFile('D:\autorun.inf'); DeleteFile('C:\autorun.inf'); BC_ImportAll; ExecuteSysClean; BC_Activate; RebootWindows(true); end.
- Clean Temp-Maps, Cache of Browsers, Recycler. Use Windows service tool cleanmgr or CCleaner or ClearProg
- Close all the programs and start only Internet Explorer!!!
- Repeat 3 log files in accordance with the rules.
- Switch Antivirus and, if you have - Firewall, on.
- Go On-Line
- Upload the quarantine over the link Upload quarantined files on the top of this page.
- Attach 3 logs to your new post..
Quarantine file encrypted with "virus" password. Here is my 3 new logs. Problem with showing hidden files still exist :/
- Execute following script
Код:begin ExecuteRepair(6); ExecuteRepair(8); RegKeyIntParamWrite('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\policies\NonEnum','{BDEADF00-C265-11D0-BCED-00A0C90AB50F}',1); RebootWindows(true); end.
It works ! Thanks a lot <vodka>