Сообщение от
vygis
My computer just behaves bad
I cannot say anything about computer, but it's owner behaves himself very bad and irresponsible: Windows version: Microsoft Windows XP, Build=2600, SP="Service Pack 2" is abslotely vulnerable and not supported anymore, also the installation of SP3 and all subsequent updates is indispensable.
Close/unload all the programs excepted AVZ and Internet Explorer
Switch off:
- Antivirus and and, if you have - Firewall.
- System Restore
- Execute following script in Manual Healing
Код:
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
ClearQuarantine;
DelCLSID('{28ABC5C0-4FCB-11CF-AAX5-81CX1C635612}');
QuarantineFile('C:\autorun.inf','');
QuarantineFile('H:\autorun.inf','');
QuarantineFile('I:\autorun.inf','');
QuarantineFile('J:\autorun.inf','');
QuarantineFile('K:\autorun.inf','');
QuarantineFile('L:\autorun.inf','');
QuarantineFile('C:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\isew32.exe','');
StopService('yyzirbwq');
DeleteService('yyzirbwq');
BC_DeleteSvc('yyzirbwq');
QuarantineFile('H:\WINDOWS\System32\Drivers\yyzirbwq.sys','');
StopService('kuofwpgw');
DeleteService('kuofwpgw');
BC_DeleteSvc('kuofwpgw');
QuarantineFile('H:\WINDOWS\System32\Drivers\kuofwpgw.sys','');
DeleteFile('H:\WINDOWS\System32\Drivers\kuofwpgw.sys');
DeleteFile('H:\WINDOWS\System32\Drivers\yyzirbwq.sys');
DeleteFile('C:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\isew32.exe');
DeleteFile('C:\autorun.inf');
DeleteFile('H:\autorun.inf');
DeleteFile('I:\autorun.inf');
DeleteFile('J:\autorun.inf');
DeleteFile('K:\autorun.inf');
DeleteFile('L:\autorun.inf');
ExecuteWizard('TSW', 2, 2, true);
ExecuteWizard('SCU', 2, 2, true);
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
SetAVZPMStatus(True);
RebootWindows(true);
end.
After reboot:
- Execute following script in Manual Healing
Код:
begin
CreateQurantineArchive('C:\quarantine.zip');
end.
- Upload the C:\quarantine.zip here: http://virusinfo.info/upload_virus_eng.php?tid=82929
- Install SP3 + all updates + Internet Explorer 8
- Repeat a log file.
- Attach a new log to your new post..