disabling my antivirus

[Rene-gad]

Where are the log files after script? If you like to speak about anything, pls. open any topic in any other subforum.

[yotta]

good luck

[Rene-gad]

Switch off:
- Antivirus and and, if you have - Firewall.
- System Restore
-Fix

O2 - BHO: AdPopup - {11F09AFD-75AD-4E51-AB43-E09E9351CE16} - (no file)
O2 - BHO: (no name) - {285AB8C6-FB22-4D17-8834-064E2BA0A6F0} - (no file)
O2 - BHO: (no name) - {489873CE-F3E1-44A3-8E89-04BE26BE4446} - (no file)

- Execute following script

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('C:\WINDOWS\system32\dllcache\wuauclt.exe');
BC_ImportAll;
ExecuteSysClean;
BC_DeleteFile('C:\WINDOWS\system32\dllcache\wuauclt.exe');
BC_Activate;
RebootWindows(true);
end.

After reboot:
- Clean Temp-Maps, Cache of Browsers, Recycler. Use Windows service tool cleanmgr or CCleaner or ClearProg
- Close all the programs and start only Internet Explorer!!!
- Repeat 3 log files in accordance with the rules.
- Switch Antivirus and, if you have - Firewall, on.
- Go On-Line
- Upload the quarantine over the link Upload quarantined files on the top of this page.
- Attach 3 logs to your new post..

[yotta]

i sent thequarantined files.

[Rene-gad]

i sent thequarantined files.

It was not any file to be quarantined. Did you execute my script? I suppose - you didn't.

[yotta]

i did executed it ,and i scanned my PC with Dr web too.

[Rene-gad]

Download IceSword, make force delete for this file

C:\WINDOWS\system32\dllcache\wuauclt.exe

Than repeat the logs.

[yotta]

i can't execute IceSword on my pc , i got a message " windows can't find 'C:\Document and Settings\......\IceSword.exe. check that u put a valid pahth name and try again".
i tried it on an other PC and it work very well, then i deleted manualy this file,do i have to send u the 03 LOGS now ?