PDA

Просмотр полной версии : hi



janujanug
16.03.2008, 14:00
I am putting the file which was created by kaspersky tool. PC and pandive both has the virus named autorun.exe and trojan so Pls send me the script to remove the virus completely.

AndreyKa
16.03.2008, 14:49
You should attach the file avptool_syscheck.zip to the message like I did it for you.

kps
16.03.2008, 15:51
Execute Script in AVZ or AVPTool:

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\WINDOWS\system32\SSVICHOSST.exe ','');
QuarantineFile('C:\Program Files\ActivationManager\ActivationManager.dll','') ;
QuarantineFile('LYLoadqr.exe','');
QuarantineFile('LYLoador.exe','');
QuarantineFile('LYLoadmr.exe','');
QuarantineFile('LYLoadhr.exe','');
QuarantineFile('LYLoader.exe','');
QuarantineFile('LYLoadbr.exe','');
QuarantineFile('LYLoadar.exe','');
QuarantineFile('LYLeador.exe','');
QuarantineFile('C:\WINDOWS\TEMP\giL6FF0S.exe','');
QuarantineFile('C:\Documents and Settings\All Users\Start Menu\Programs\Startup\msupdate.exe','');
QuarantineFile('C:\WINDOWS\TEMP\MGC786.EXE','');
QuarantineFile('C:\Program Files\Common Files\Real\WeatherBug\MiniBugTransporter.dll','');
DeleteFile('C:\WINDOWS\system32\SSVICHOSST.exe');
BC_ImportALL;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
Your computer will reboot.
Upload the quarantined files according to the rules. (upload here http://virusinfo.info/upload_virus_eng.php?tid=19915 )
Make new logs.