Printable View
AVP has detected a virus called HEUR: Worm.W32.Generic in my C:\Recycler\S-1-x-xxxxxxxxxxxx\nissan.exe, but it kept postponing any action to the file.
When I go to that folder, I couldn't see nissan.exe. I tried to delete that S-1-x folder all together, it wouldn't allow me, either.
1. Please, disable System Restore and antivirus (if you have).
2. Execute this script in AVPTool:
[CODE]begin
SetAVZGuardStatus(True);
RegKeyIntParamWrite('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer','NoDriveTypeAutoRun', 221);
QuarantineFile('C:\RECYCLER\S-1-5-21-8662733650-8412177918-470467703-0521\nissan.exe','');
DeleteFile('C:\RECYCLER\S-1-5-21-8662733650-8412177918-470467703-0521\nissan.exe');
BC_ImportDeletedList;
ExecuteSysClean;
ExecuteWizard('TSW', 3, 3, true);
BC_Activate;
RebootWindows(true);
end.[/CODE]
3. After reboot execute this script in AVPTool:
[CODE]begin
CreateQurantineArchive('C:\quarantine.zip');
end.[/CODE]
Upload file C:\quarantine.zip, by link [url]http://virusinfo.info/upload_virus.php?tid=63477[/url]
4. Attach a new log to your new post.