let me know if this is enough..
let me know if this is enough..
virusinfo_cure.zip- it is forbidden to attach in themes. So, my conclusion is that you didn't read or you didn't understand simple english.
lets try from beginning
*Нажми и выполни, если хочешь чтобы помощь улучшилась и ускорилась
*MyFirefox Portable
special avz @ rapidshare.com
md5: 2091925798B7909E010E3F7E328C5F0D
is my english bad...whats is saying here???
create a new thread in the "Help Me" section only. The header should contain a brief description of the problem and the body should provide the details. Attach the logfiles created during the system analysis (AVZ - virusinfo_syscure.zip, AVZ - virusinfo_syscheck.zip, HJT - hijackthis.log) to the message. There should be 3 logs in general. We will do our best to help you.
i am not crazy
do you notice some difference between virusinfo_syscure.zip and virusinfo_cure.zip ?
ofcourse..but whats the difference???it says no where...i think i overread it..and thats normal because it is a minor thing and i dont know anything about it...so wich file should i send the other one ist there
Добавлено через 5 минут
i also sent you the syscure zip...??
Добавлено через 2 минуты
so what to do next...???
Последний раз редактировалось metin; 19.01.2009 в 00:15. Причина: Добавлено
What is the difference between a virus and human ? Both are have self-replication mechanism, right ?
You may not answer, just think about it.
for us "difference between virusinfo_syscure.zip and virusinfo_cure.zip "- is like a difference between a virus and human
I will wright you a new script. Just follow exactly, ok?
*Нажми и выполни, если хочешь чтобы помощь улучшилась и ускорилась
*MyFirefox Portable
special avz @ rapidshare.com
md5: 2091925798B7909E010E3F7E328C5F0D
o know whats the difference...i just overread it....and i also sent the otherone so you did not have to check that one...so what s the problem...??
ok sent me a new script
Disconnect from internet, disable AVG (basically, in any antivirus settings you can find an options to disable a real-time protection, i don't remember yours version in details), disable Windows Defender ( How-to:
http://www.vista4beginners.com/How-t...ndows-Defender )
Then right click with mouse on avz, choose "Run as Administrator", insert your password for approval( i don't know your system administrator password, and i don't want to know) and click OK.
Execute this script in avz: (how-to: http://virusinfo.info/showthread.php?t=9207 )
computer will reboot.Код:begin SearchRootkit(true, true); SetAVZGuardStatus(True); ClearQuarantine; QuarantineFile('C:\Windows\system32\drivers\regi.sys',''); QuarantineFile('C:\PROGRA~1\GOOGLE~1\BAE.dll',''); QuarantineFile('C:\Windows\system32\jlozvsbouz.dll',''); QuarantineFile('C:\Windows\System32\CDDBUISony32.dll',''); QuarantineFile('C:\Windows\system32\DRIVERS\nwlnkfwd.sys',''); QuarantineFile('C:\Windows\system32\Drivers\HDJAsioK.sys',''); QuarantineFile('C:\Windows\system32\DRIVERS\EC168BDA.sys',''); QuarantineFile('C:\Windows\system32\Drivers\HDJBulk.sys',''); BC_ImportAll; BC_Activate; CreateQurantineArchive('C:\virusinfo_quarantine.zip'); RebootWindows(true); end.
File virusinfo_quarantine.zip will be created in disk C, upload it using this link http://virusinfo.info/upload_virus_eng.php?tid=37480
P.S. No password, nothing else. Just do it like i did described. Is there something, that you didn't understand?
Последний раз редактировалось drongo; 19.01.2009 в 01:14.
*Нажми и выполни, если хочешь чтобы помощь улучшилась и ускорилась
*MyFirefox Portable
special avz @ rapidshare.com
md5: 2091925798B7909E010E3F7E328C5F0D
hello i cannot disable defender...the decription goes to advanced options and i dont have the same screen when i open tools???
Добавлено через 3 минуты
i did it another way forget about it
Добавлено через 14 минут
hello..everything done but cannot find the virusinfo_quarantine.zip....anywhere on my computerr....???real strange i think i am getting crazy
Последний раз редактировалось metin; 19.01.2009 в 01:32. Причина: Добавлено
or is this the right one???
Последний раз редактировалось drongo; 19.01.2009 в 10:04.
metin,
please go to START -> My Computer -> Local Disk (C:),
look for file called virusinfo_quarantine.zip or virusinfo_quarantine,
upload it using this link http://virusinfo.info/upload_virus_eng.php?tid=37480.
Thank You!!!
i did look there it is not there....
Strange.
In your post #30 was something close
Don't attach it again, upload it using http://virusinfo.info/upload_virus_eng.php?tid=37480
Thanks.
*Нажми и выполни, если хочешь чтобы помощь улучшилась и ускорилась
*MyFirefox Portable
special avz @ rapidshare.com
md5: 2091925798B7909E010E3F7E328C5F0D
you think i dont know where to look on local disk??? very irritating post
Добавлено через 2 минуты
i just took al steps...and there is no log called. virusinfo_quarantine.zip or virusinfo_quarantine i searched on the computer under search button too...
Последний раз редактировалось metin; 19.01.2009 в 12:56. Причина: Добавлено
In your post #30 what it was?
*Нажми и выполни, если хочешь чтобы помощь улучшилась и ускорилась
*MyFirefox Portable
special avz @ rapidshare.com
md5: 2091925798B7909E010E3F7E328C5F0D
what do you mean...i could not find that virusinfo_quarantine.zip or virusinfo_quarantine...
and a now know that the folder wasnt the right one...but there is nothing like virusinfo_quarantine.zip or virusinfo_quarantine in my C drive local disk...
I am repeat: file that you did attached in post # 30- do you remember where it is now ? upload it by http://virusinfo.info/upload_virus_eng.php?tid=37480
name was different, for some reason, i don't know why.
*Нажми и выполни, если хочешь чтобы помощь улучшилась и ускорилась
*MyFirefox Portable
special avz @ rapidshare.com
md5: 2091925798B7909E010E3F7E328C5F0D
and another thing i attached more than 1 file....i dont know wich on you mean...but i uploaded one...hope that this one is the right one
Добавлено через 37 минут
the admin sent me a mail but i already tried that...i havent got that files...everything is going wrong...i think i must reboot my computer
Добавлено через 14 минут
this is what you asked me to do>>>>>>
here's the list of files you're asked to send -
---Quote (Originally by drongo)---
no, you did uploaded other files...try to send us only these files:
* C:\Windows\system32\drivers\regi.sys
C:\Windows\system32\jlozvsbouz.dll*
---End Quote---
and the directions -
---Quote---
1. Click "File" - "Add to quarantine by list ".
2. Enter the list of files which were asked to send.
3. Press "Start" and wait until "File addition process – complete” notification appears at the bottom of the window.
4. Close current window “Add to quarantine by list ".
5. Choose from the menu "File"-> “Quarantine folder viewer ".
6. Mark files in the list which should be sent.
7. Click "Archive" and specify a place on the disk where the archive should be kept.
8. Upload the archive using the upload by http://virusinfo.info/upload_virus_eng.php?tid=37480
---End Quote---
I did this but there is no file like C:\Windows\system32\drivers\regi.sys the other file is there and i did archive it see uploaded files...
these are the files in the folder viewer:
- C:\Windows\system32\jlozvsbouz.dll
- C:\ PROGRA~1\GOOGLE~1\BAE.dll
- C:\Windows\system32\DriversC:\HDJAsioK.sys
- C:\Windows\system32\DriversC:\HDJBulk.sys
gr metino///
Последний раз редактировалось metin; 19.01.2009 в 15:28. Причина: Добавлено
Ok, thanks. Now you know how to upload to us,so curing will go faster
Please wait. We would like to be sure, we are waiting an answer from virus annalist.
P.s. it is possible that in your system one script command not working, i will contact with author.
Последний раз редактировалось drongo; 19.01.2009 в 16:03.
*Нажми и выполни, если хочешь чтобы помощь улучшилась и ускорилась
*MyFirefox Portable
special avz @ rapidshare.com
md5: 2091925798B7909E010E3F7E328C5F0D
okk..tnx but i didnt upload the second file you needed???
I did this but there is no file like C:\Windows\system32\drivers\regi.sys
is everything correct now???