PDA

Просмотр полной версии : Take a look...



james001
19.04.2008, 05:10
How does it look?

Rene-gad
19.04.2008, 10:02
Remove the Program X_Bat.exe over applications manager: It's Adware http://research.sunbelt-software.com/threatdisplay.aspx?name=Rabio&threatid=169974
If you should receive any problem
Fix this key

O4 - Startup: Bat - Auto Update.lnk = C:\Program Files\Bat\Bat.exe
then run the script

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
TerminateProcessByName('c:\program files\bat\x_bat.exe');
QuarantineFile('c:\program files\bat\x_bat.exe','');
DeleteFile('c:\program files\bat\x_bat.exe');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
After reboot upload the quarantine file and make the new logs.

james001
20.04.2008, 06:25
OK... ran the script and uploaded files

Rene-gad
20.04.2008, 10:02
.. ran the scriptWas it really necessary? Couldn't you remover the program as usual? :)
I cannot find any problem in these logs. Do you have one?;)
Do you know, what is this program good for: c:\program files\skr\sma.exe ?