Printable View
Hello
I would be very grateful for help as am going to sites I dont want to. When I did the hijack this log it suggested I delete a system 32 file which had a cache of identical IP addresses so I have done that. Am not sure what that means for the log enclosed here (I ran it again after I deleted the file). Havent done anything like this before so hope it makes sense to you.
regards
Jenny
1. Please, disable System Restore and antivirus (if you have).
2. Execute this script in AVZ:
[CODE]begin
SetAVZGuardStatus(True);
DeleteFileMask(GetAVZDirectory+'Quarantine', '*.*', true);
QuarantineFile('C:\WINDOWS\system32\sdra64.exe','');
DeleteFile('C:\WINDOWS\system32\sdra64.exe');
BC_ImportDeletedList;
ExecuteSysClean;
ExecuteRepair(13);
BC_Activate;
RebootWindows(true);
end.[/CODE]
3. After reboot execute this script in AVZ:
[CODE]begin
CreateQurantineArchive(GetAVZDirectory+'quarantine.zip');
end.[/CODE]
Upload file quarantine.zip, by link [url]http://virusinfo.info/upload_virus.php?tid=64571[/url]
4. Make the logs [B]syscheck[/B] and [B]hijackthis.[/B]
Dear Aleksandra
Thanks for replying so quickly. I sent the quarantine files to the link provided but dont think they were in the right format - apologies - I hope they still make sense?
I have enclosed the syscheck and hijack logs and will let you know how things go as have not been surfing!
Many thanks again,
Merry Christmas:xmas:
Jenny
I can see nothing harmful in your logs.
[URL="http://virusinfo.info/showthread.php?t=9206"]Fix in HijackThis:[/URL]
[QUOTE]O3 - Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - (no file)[/QUOTE]