PDA

Просмотр полной версии : i need help



amr222222
28.09.2010, 17:57
i really need help i have been a vitim of win32.sality and it spread in my computer and its so slow now and i lost many applications but i can't format it because i hae some important data, please help

Никита Соловьев
29.09.2010, 00:54
- Execute following script in avptool:


begin
ClearQuarantine;
SearchRootkit(true, true);
SetAVZGuardStatus(true);
QuarantineFile('C:\WINDOWS\system32\drivers\phrqm. sys','');
DeleteService('amsint32');
QuarantineFile('G:\tnqjpp.pif','');
QuarantineFile('G:\autorun.inf','');
QuarantineFile('F:\rhmvdf.pif','');
QuarantineFile('F:\autorun.inf','');
QuarantineFile('E:\fieuty.exe','');
QuarantineFile('E:\autorun.inf','');
QuarantineFile('D:\hfqglp.exe','');
QuarantineFile('D:\autorun.inf','');
QuarantineFile('C:\wgvxgi.pif','');
QuarantineFile('C:\autorun.inf','');
DeleteFile('C:\autorun.inf');
DeleteFile('C:\wgvxgi.pif');
DeleteFile('D:\autorun.inf');
DeleteFile('D:\hfqglp.exe');
DeleteFile('E:\autorun.inf');
DeleteFile('E:\fieuty.exe');
DeleteFile('F:\autorun.inf');
DeleteFile('F:\rhmvdf.pif');
DeleteFile('G:\autorun.inf');
DeleteFile('G:\tnqjpp.pif');
DeleteFile('C:\WINDOWS\system32\drivers\phrqm.sys' );
BC_ImportALL;
ExecuteSysClean;
ExecuteRepair(11);
ExecuteRepair(17);
ExecuteWizard('TSW',2,2,true);
BC_Activate;
RebootWindows(true);
end.


After reboot

Execute script:



begin
CreateQurantineArchive('C:\quarantine.zip');
end.


File C:\quarantine.zip upload here (http://virusinfo.info/upload_virus_eng.php?tid=88914)

Check your PC with SalityKiller (http://support.kaspersky.com/viruses/solutions?qid=208279889)

Make a new log of avptool

CyberHelper
30.09.2010, 00:54
Статистика проведенного лечения:

Получено карантинов: 1
Обработано файлов: 32
В ходе лечения вредоносные программы в карантинах не обнаружены