Infected by Trojan.Win32.Scar.byda

[Euth]

I have tried to remove it manually, but it just doesn't work. It has gotten rid of my start menu, my task bar, and it keeps editing my registry even if I delete it's modifications. It's name is masked as JavaUpdater.exe but I know it is really not a java updater. If I tell my comp (through msconfig) to not load any start up items, apply, restart, it just acts as if I never changed it. When I executed the file, it just disappeared. I have a sample of this virus if you wish for me to upload it. I also can't really install any new software since this virus has disabled almost all my services. I think it has also deleted my Sound Drivers
Here is the file scan on Virus Total
http://www.virustotal.com/analisis/4...19b-1270856460

[Aleksandra]

1. Please, disable System Restore and antivirus (if you have).
2. Execute this script in AVPTool:

begin
SetAVZGuardStatus(True);
DelCLSID('F047J17J-0O0E-W555-LLC1-78W8H57X1U4C');
 QuarantineFile('C:\WINDOWS\system32\svchost\JavaUpdater.exe','');
 QuarantineFile('c:\windows\euthexplorer.exe','');
 DeleteFile('C:\WINDOWS\system32\svchost\JavaUpdater.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','JavaTDM');
 RegKeyParamDel('HKEY_USERS','S-1-5-21-1229272821-1935655697-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Run','JavaTDM');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','JavaTDM');
 RegKeyParamDel('HKEY_USERS','S-1-5-21-1229272821-1935655697-839522115-1004\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','JavaTDM');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

3. After reboot execute this script in AVPTool:

begin
 CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.

Upload file quarantine.zip, by link http://virusinfo.info/upload_virus.php?tid=75993

4. Make a new log of AVPTool.

[Euth]

Here you go.
Thank you for the help. But I still have the problem where my Task Bar is missing, and my comp is running a lot slower now and takes ten years to start up. I also can not copy/paste files, nor can I drag and drop them. Would you recommend a reformat? A reformat would also mean I lose everything since I can't copy/paste/cut.

[Rene-gad]

Did you rename c:\windows\explorer.exe to c:\windows\euthexplorer.exe?

[Euth]

Did you rename c:\windows\explorer.exe to c:\windows\euthexplorer.exe?

Yes, it was me. Was changing my start button via reosurce hacker.

[Rene-gad]

Yes, it was me.

Rename it back and repeat a log file of AVPTool.

[CyberHelper]

Статистика проведенного лечения:

• Получено карантинов: 1
• Обработано файлов: 1
• В ходе лечения вредоносные программы в карантинах не обнаружены