Of course the problem is it's really a virus that I would really like gone.
Thanks
Printable View
Of course the problem is it's really a virus that I would really like gone.
Thanks
I think in your system is more than one spyware :)
Disconnect from internet and most important exit/disable your antivirus/firewall
execute this script in avz ([url]http://virusinfo.info/showthread.php?t=9207[/url] ):
[code]
begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DelBHO('{C9C42510-9B21-41c1-9DCD-8382A2D07C61}');
DelBHO('{0B1B0D47-95F7-4bad-9309-A945B655AE61}');
QuarantineFile('C:\WINDOWS\system32\digeste.dll','');
QuarantineFile('C:\Program Files\Search Settings\SearchSettings.exe','');
QuarantineFile('C:\WINDOWS\system32\Drivers\sddriver.sys','');
QuarantineFile('C:\WINDOWS\system32\DRIVERS\scrcap.sys','');
QuarantineFile('C:\WINDOWS\system32\iehelper.dll','');
QuarantineFile('C:\Program Files\Ask.com\Supertoolbar\GenericAskToolbar.dll','');
QuarantineFile('c:\program files\ventsrv\ventrilo_svc.exe','');
QuarantineFile('c:\program files\ventsrv\ventrilo_srv.exe','');
TerminateProcessByName('c:\windows\sysguard.exe');
QuarantineFile('c:\windows\sysguard.exe','');
QuarantineFile('c:\program files\curse\curseclient.exe','');
DeleteFile('c:\windows\sysguard.exe');
DeleteFile('C:\Program Files\Ask.com\Supertoolbar\GenericAskToolbar.dll');
DeleteFile('C:\WINDOWS\system32\iehelper.dll');
DeleteFile('C:\Program Files\Search Settings\SearchSettings.exe');
DeleteFile('C:\WINDOWS\system32\digeste.dll');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(6);
ExecuteRepair(8);
ExecuteRepair(9);
ExecuteRepair(16);
ExecuteRepair(2);
ExecuteRepair(4);
ExecuteRepair(12);
ExecuteRepair(13);
RebootWindows(true);
end.
[/code]
Your system will reboot.
Upload all quarantined files according to Appendix #3 of Rules: [url]http://virusinfo.info/showthread.php?t=9184[/url] , using [url]http://virusinfo.info/upload_virus_eng.php?tid=39173[/url]
Make logs again according to rules [url]http://virusinfo.info/showthread.php?t=9184[/url].