hello
my computer become very slower,i am using antivirus bitdefender but i think it don't detect all the virus.
can you help me to clean my computer from virus
Printable View
hello
my computer become very slower,i am using antivirus bitdefender but i think it don't detect all the virus.
can you help me to clean my computer from virus
Switch System Restore Off
Switch your Antivirus Off
Fix
[CODE]F2 - REG:system.ini: Shell=Explorer.exe logoneui.exe
O4 - HKCU\..\Run: [amva] C:\WINDOWS\system32\amvo.exe
O4 - HKCU\..\Run: [Yahoo Messengger] C:\WINDOWS\system32\SSVICHOSST.exe
O4 - HKCU\..\Run: [firewall 2008] C:\WINDOWS\system32\logoneui.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1[/CODE]
Execute the script
[CODE]begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('C:\WINDOWS\system32\logoneui.exe','');
QuarantineFile('C:\WINDOWS\system32\amvo.exe','');
QuarantineFile('D:\autorun.inf','');
QuarantineFile('E:\autorun.inf','');
DeleteFile('E:\autorun.inf');
DeleteFile('D:\autorun.inf');
DeleteFile('C:\WINDOWS\system32\amvo.exe');
DeleteFile('C:\WINDOWS\system32\logoneui.exe');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.[/CODE]
After reboot make temp-maps and cache empty
Upload the quarantine over red link on the top of the page
Repeat the logs
i uploaded the quarantined files
Switch System Restore Off
Switch your Antivirus Off
Connect the drive E: to your PC.
Execute the script.
[CODE]begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('E:\autorun.inf','');
DeleteFile('E:\autorun.inf');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.[/CODE]
After reboot:
Pls. update the database of AVZ!!! If you have a problem with updates - download this file [url]http://z-oleg.com/secur/avz_up/avzbase.zip[/url] and extract all the contents to the map ..\AVZ\Base.
Repeat the logs - at first AVZ-Logs, then - Hijackthis.