You have made changes to the hosts?
205.133.7.3 IM2COOL.COM
24.201.245.200 ftp.videotron.ca
216.113.122.74 ia-cnnu-bb04-pos5-0-0-cpe074.vtl.net
65.203.23.136
www.toast.net
208.84.104.2
www.fibrenoire.ca
1. Please, disable System Restore and antivirus (if you have).
2. Execute the script in AVPTool:
Код:
begin
ClearQuarantine;
ExecuteAutoQuarantine;
RegKeyIntParamWrite('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer','NoDriveTypeAutoRun', 221);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '2201', 3);
RegKeyIntParamWrite('HKCU', 'Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\', '1201', 3);
DeleteFileMask('%tmp% ','*.* ',true );
ExecuteWizard('TSW', 3, 3, true);
CreateQurantineArchive('C:\quarantine.zip');
RebootWindows(true);
end.
After restart upload file C:\quarantine.zip, by link http://virusinfo.info/upload_virus.php?tid=58838
3. Attach a new avptool_syscheck.zip.