Trojan - Virus - Computer does not allow me to install kaspersky

[iennav]

Hi,

I have a virus/trojan. Tried to install kaspersky product - does not allow says: you may have severe infection etc ... download virus upload tool.

Internet does not work. System Restore does not work. The virus or trojan is a program which looks like a virus scanner ... you cannot click it away.

I did downloaded virus tool from kaspersky and I hereby send the log. I am sending this from another computer.

Please help.

Desviedanje.

[Rene-gad]

Hello,

pls. load PC in normal mode.
Remove AVG, it cannot be recommended to use 2 antiviruses simultaneously .

Close/unload all the programs excepted AVPTool and Internet Explorer

Switch off:
- Antivirus and and, if you have - Firewall.
- System Restore

- Execute following script in Manual Healing

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DeleteFile('%windir%\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job');
 QuarantineFile('C:\DOCUME~1\VERSCH~1\LOCALS~1\Temp\Yhy.exe','');
 QuarantineFile('C:\Documents and Settings\Verschuren\Local Settings\Application Data\gqiwqqcaa\phspemushdw.exe','');
 QuarantineFile('C:\Documents and Settings\Verschuren\Application Data\ppbwqxchw\pynqxalshdw.exe','');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','galoxanh');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','ytfrndrk');
 DeleteFile('C:\Documents and Settings\Verschuren\Application Data\ppbwqxchw\pynqxalshdw.exe');
 DeleteFile('C:\Documents and Settings\Verschuren\Local Settings\Application Data\gqiwqqcaa\phspemushdw.exe');
 DeleteFile('C:\DOCUME~1\VERSCH~1\LOCALS~1\Temp\Yhy.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

After reboot:
- Execute following script in Manual Healing

begin
CreateQurantineArchive('C:\quarantine.zip');    
end.

- Upload the C:\quarantine.zip here: http://virusinfo.info/upload_virus_eng.php?tid=85373
- Make a new log file of AVPTool
- Attach a new log to your new post..