PDA

: New Threat



tzmeddy
12.01.2008, 23:41
Please help resolve these threats

AndreyKa
13.01.2008, 01:09
Close all programs.
Run Kaspersky Virus Remove Tool. Go to Manual curing.
Copy the code below and paste it into the field for Step 3.
Run this script.


begin
SetAVZGuardStatus(True);
QuarantineFile('C:\WINDOWS\system32\awtsp.dll','') ;
QuarantineFile('C:\WINDOWS\system32\dylvmwgw.dll', '');
QuarantineFile('UmxWnp.Dll','');
QuarantineFile('C:\WINDOWS\system32\rqrsrol.dll',' ');
QuarantineFile('C:\WINDOWS\system32\ntos.exe','');
QuarantineFile('C:\WINDOWS\system32\dxdss.sys','') ;
QuarantineFile('c:\windows\system32\jtfilusv.exe', '');
DeleteFile('C:\WINDOWS\system32\ntos.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
end.

Reboot the computer.
Load the quarantine up: http://virusinfo.info/upload_virus_eng.php?tid=16324

AndreyKa
13.01.2008, 15:22
C:\WINDOWS\system32\awtsp.dll - not-a-virus:AdWare.Win32.Virtumonde.dnl
C:\WINDOWS\system32\dylvmwgw.dll - not-a-virus:AdWare.Win32.Virtumonde.dnl
C:\WINDOWS\system32\rqrsrol.dll - not-a-virus:AdWare.Win32.Virtumonde.djh
c:\windows\system32\jtfilusv.exe - Trojan-Downloader.Win32.Agent.gwe

Close all programs.
Run Kaspersky Virus Remove Tool. Go to Manual curing.
Copy the code below and paste it into the field Step 3
Run this script.


begin
SetAVZGuardStatus(True);
ClearQuarantine;
DeleteFile('C:\WINDOWS\system32\awtsp.dll','');
DeleteFile('C:\WINDOWS\system32\dylvmwgw.dll','');
DeleteFile('C:\WINDOWS\system32\rqrsrol.dll','');
QuarantineFile('C:\WINDOWS\system32\dxdss.sys','') ;
DeleteFile('c:\windows\system32\jtfilusv.exe','');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

Reboot the computer.
Load the quarantine up: http://virusinfo.info/upload_virus_eng.php?tid=16324