amr222222
28.09.2010, 17:57
i really need help i have been a vitim of win32.sality and it spread in my computer and its so slow now and i lost many applications but i can't format it because i hae some important data, please help
Никита Соловьев
29.09.2010, 00:54
- Execute following script in avptool:
begin
ClearQuarantine;
SearchRootkit(true, true);
SetAVZGuardStatus(true);
QuarantineFile('C:\WINDOWS\system32\drivers\phrqm. sys','');
DeleteService('amsint32');
QuarantineFile('G:\tnqjpp.pif','');
QuarantineFile('G:\autorun.inf','');
QuarantineFile('F:\rhmvdf.pif','');
QuarantineFile('F:\autorun.inf','');
QuarantineFile('E:\fieuty.exe','');
QuarantineFile('E:\autorun.inf','');
QuarantineFile('D:\hfqglp.exe','');
QuarantineFile('D:\autorun.inf','');
QuarantineFile('C:\wgvxgi.pif','');
QuarantineFile('C:\autorun.inf','');
DeleteFile('C:\autorun.inf');
DeleteFile('C:\wgvxgi.pif');
DeleteFile('D:\autorun.inf');
DeleteFile('D:\hfqglp.exe');
DeleteFile('E:\autorun.inf');
DeleteFile('E:\fieuty.exe');
DeleteFile('F:\autorun.inf');
DeleteFile('F:\rhmvdf.pif');
DeleteFile('G:\autorun.inf');
DeleteFile('G:\tnqjpp.pif');
DeleteFile('C:\WINDOWS\system32\drivers\phrqm.sys' );
BC_ImportALL;
ExecuteSysClean;
ExecuteRepair(11);
ExecuteRepair(17);
ExecuteWizard('TSW',2,2,true);
BC_Activate;
RebootWindows(true);
end.
After reboot
Execute script:
begin
CreateQurantineArchive('C:\quarantine.zip');
end.
File C:\quarantine.zip upload here (http://virusinfo.info/upload_virus_eng.php?tid=88914)
Check your PC with SalityKiller (http://support.kaspersky.com/viruses/solutions?qid=208279889)
Make a new log of avptool
CyberHelper
30.09.2010, 00:54
Статистика проведенного лечения:
Получено карантинов: 1
Обработано файлов: 32
В ходе лечения вредоносные программы в карантинах не обнаружены
vBulletin® v4.2.5, Copyright ©2000-2025, Jelsoft Enterprises Ltd. Перевод: zCarot