-
Вложений: 1
I can't remove a virus
Hello,
I have done a system scan with Kapersky. It found many threats and removed them all. The next day I restarted my computer and it seems that I still have the virus. Pop-up windows keep coming up, some of them telling me I have a virus and asking for downloading something.
I did a manual cure with Kapersky and now the programm proposed me to send you the log file for helping me.
Thank you for your help.
-
Close/unload all the programs excepted AVZ and Internet Explorer
Switch off:
- Antivirus and and, if you have - Firewall.
- System Restore
- [URL="http://virusinfo.info/showthread.php?t=9207"]Execute following script[/URL]
[CODE]begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('/C.exe','');
QuarantineFile('C:\.X','');
QuarantineFile('D:\.X','');
QuarantineFile('E:\.X','');
QuarantineFile('G:\.X','');
QuarantineFile('H:\.X','');
QuarantineFile('I:\.X','');
QuarantineFile('C:\WINDOWS\system32\fqkneyqh.dll','');
QuarantineFile('C:\WINDOWS\system32\vcmsdx.dll','');
QuarantineFile('C:\WINDOWS\system32\detoured.dll','');
QuarantineFile('C:\WINDOWS\system32\wxvault.dll','');
DeleteFile('C:\WINDOWS\system32\vcmsdx.dll');
DeleteFile('C:\WINDOWS\system32\fqkneyqh.dll');
DeleteFile('I:\.X');
DeleteFile('H:\.X');
DeleteFile('G:\.X');
DeleteFile('F:\.X');
DeleteFile('E:\.X');
DeleteFile('D:\.X');
DeleteFile('C:\.X');
DeleteFile('/C.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
[/CODE]
After reboot:
- Clean Temp-Maps, Cache of Browsers, Recycler. Use Windows service tool [URL="http://support.microsoft.com/?scid=kb%3Ben-us%3B315246&x=17&y=6"]cleanmgr[/URL] or [URL="http://www.ccleaner.com/"]CCleaner[/URL] or [URL="http://www.clearprog.de/"]ClearProg[/URL]
- Close all the programs and start only Internet Explorer!!!
- Repeat 3 log files in accordance with the [URL="http://virusinfo.info/showthread.php?t=9184"]rules[/URL].
- Switch Antivirus and, if you have - Firewall, on.
- Go On-Line
- Upload the quarantine in accordance with Appx. 3 of the rules.
- Attach 3 logs to your new post..
-
Thank you for the script.
I can't deactivate the antivirus because it is running from our server and I don't have the access to it. Is it a problem?
-
It could be a problem,a script will might don't work correctly, at least disconnect from your network.
-
Thank you for your help. But I couldn't do anything anymore on my computer. I couldn't download the files you mentionned or get them to run. Then I couldn't log into Windows anymore it crashed all the time. I could only log on safe mode.
So after talking to my IT guy I formated my computer and reinstalled Windows. Thanks for you help anyways.
Page generated in 0.00292 seconds with 10 queries