I think there is a virus or there are viruses, every time when i connect to internet, windows asks for full skan and opens IE page with unknown address...
Thank you!
Printable View
I think there is a virus or there are viruses, every time when i connect to internet, windows asks for full skan and opens IE page with unknown address...
Thank you!
We have English section, so you may start your topic here: [url]http://virusinfo.info/forumdisplay.php?f=84[/url]
Execute the following script in AVZ:
[code]
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\WINDOWS\system32\windrvNT.sys','');
QuarantineFile('C:\WINDOWS\system32\Drivers\johjkwje.dat','');
QuarantineFile('C:\WINDOWS\system32\ComRc.dll','');
QuarantineFile('C:\WINDOWS\system32\ci.dll','');
DeleteFile('C:\WINDOWS\system32\Drivers\johjkwje.dat');
DeleteFile('C:\WINDOWS\system32\ci.dll');
BC_ImportALL;
BC_DeleteSvc('hvijgfmh');
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.[/code]
After your system reboots, upload all quarantined files according to appendix #3 of the Rules and using this page: [url]http://virusinfo.info/upload_virus.php?tid=17043[/url].
Спасибо, но дело в том что мне легче читать на Русском, но легче писать на Англискомю
Пофиксите в HijackThis:
[code]
O2 - BHO: (no name) - {0E106683-C2BB-4796-8113-398840D91C7E} - (no file)
O2 - BHO: (no name) - {CB5AB25F-6FAB-45A5-AFB3-B4B65A3AA5AC} - C:\WINDOWS\system32\ci.dll[/code]
Обновите базы AVZ и сделайте новые логи.
Статистика проведенного лечения:
[LIST][*]Получено карантинов: [B]1[/B][*]Обработано файлов: [B]4[/B][*]В ходе лечения обнаружены вредоносные программы:
[LIST=1][*] c:\\windows\\system32\\ci.dll - [B]Rootkit.Win32.Podnuha.y[/B] (DrWEB: Trojan.DownLoader.46255)[/LIST][/LIST]