I want to get info on the syscheck file generated by Kaspersky. I have a few bugs that needs to be removed. Thanks Fredsel
Printable View
I want to get info on the syscheck file generated by Kaspersky. I have a few bugs that needs to be removed. Thanks Fredsel
Please disable System Restore (see Appendix 1 of [url=http://virusinfo.info/showthread.php?t=9184]rules[/url]).
Close all programs.
[url=http://avptool.virusinfo.info/en/AVPTool_helpdesk_curescript.htm]Execute the script[/url]:
[code]
begin
SetAVZGuardStatus(True);
SetAVZPMStatus(True);
RegKeyIntParamWrite('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer','NoDriveTypeAutoRun', 221);
QuarantineFile('F:\autorun.inf','');
DeleteService('cpuz129');
QuarantineFile('D:\hbcd\wintools\autorun.exe','');
QuarantineFile('C:\WINDOWS\system32\892915\krnln.fnr','');
QuarantineFile('C:\WINDOWS\system32\892915\i-123.exe','');
QuarantineFile('C:\WINDOWS\system32\892915\dp1.fne','');
QuarantineFile('C:\DOCUME~1\FREDDI~1\LOCALS~1\Temp\E_N4\spec.fne','');
QuarantineFile('C:\DOCUME~1\FREDDI~1\LOCALS~1\Temp\E_N4\shell.fne','');
QuarantineFile('C:\DOCUME~1\FREDDI~1\LOCALS~1\Temp\E_N4\krnln.fnr','');
QuarantineFile('C:\DOCUME~1\FREDDI~1\LOCALS~1\Temp\E_N4\internet.fne','');
QuarantineFile('C:\DOCUME~1\FREDDI~1\LOCALS~1\Temp\E_N4\HtmlView.fne','');
QuarantineFile('C:\DOCUME~1\FREDDI~1\LOCALS~1\Temp\E_N4\eAPI.fne','');
QuarantineFile('C:\DOCUME~1\FREDDI~1\LOCALS~1\Temp\E_N4\dp1.fne','');
QuarantineFile('c:\windows\system32\ba9c8f\ef290e.exe','');
QuarantineFile('c:\windows\system32\892915\i-123.exe','');
QuarantineFile('d:\hbcd\wintools\autorun.exe','');
CreateQurantineArchive('C:\quarantine.zip');
DeleteFile('c:\windows\system32\892915\i-123.exe');
DeleteFile('F:\autorun.inf');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
[/code]
The computer will reboot.
Upload file C:\quarantine.zip, by link [color=red][b][u]Upload quarantined files[/u][/b][/color] in top of this thread.
Do "Collect system information" and attach new avptool_syscheck.zip to the thread.