Printable View
help mee..my laptop went crazy...some applications takes forever to load when i try to use them...and i keep receiving "task manager has been disabled by your administrator" when i try to use task manager ..i corrected that from registry editor several times but it keeps happening again . i need your help
1. Please, disable System Restore and antivirus (if you have).
2. Execute this script in AVPTool:
[CODE]begin
SetAVZGuardStatus(True);
RegKeyIntParamWrite('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer','NoDriveTypeAutoRun', 221);
QuarantineFile('c:\winxp\system32\zkqshbwakeuo.exe','');
TerminateProcessByName('c:\winxp\system32\zkqshbwakeuo.exe');
DeleteFile('c:\winxp\system32\zkqshbwakeuo.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','loginservces');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\RunServices','loginservces');
RegKeyParamDel('HKEY_USERS','S-1-5-21-1645522239-790525478-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Run','loginservces');
RegKeyParamDel('HKEY_USERS','S-1-5-21-1645522239-790525478-725345543-1003\Software\Microsoft\Windows\CurrentVersion\RunServices','loginservces');
BC_ImportDeletedList;
ExecuteSysClean;
ExecuteWizard('TSW', 3, 3, true);
BC_Activate;
RebootWindows(true);
end.[/CODE]
3. After reboot execute this script in AVPTool:
[CODE]begin
CreateQurantineArchive('C:\quarantine.zip');
end.[/CODE]
Upload file C:\quarantine.zip, by link [url]http://virusinfo.info/upload_virus.php?tid=64691[/url]
4. Make a new log of AVPTool.
[QUOTE=Aleksandra;542470]1. Please, disable System Restore and antivirus (if you have).
2. Execute this script in AVPTool:
[CODE]begin
SetAVZGuardStatus(True);
RegKeyIntParamWrite('HKLM','SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer','NoDriveTypeAutoRun', 221);
QuarantineFile('c:\winxp\system32\zkqshbwakeuo.exe','');
TerminateProcessByName('c:\winxp\system32\zkqshbwakeuo.exe');
DeleteFile('c:\winxp\system32\zkqshbwakeuo.exe');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','loginservces');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\RunServices','loginservces');
RegKeyParamDel('HKEY_USERS','S-1-5-21-1645522239-790525478-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Run','loginservces');
RegKeyParamDel('HKEY_USERS','S-1-5-21-1645522239-790525478-725345543-1003\Software\Microsoft\Windows\CurrentVersion\RunServices','loginservces');
BC_ImportDeletedList;
ExecuteSysClean;
ExecuteWizard('TSW', 3, 3, true);
BC_Activate;
RebootWindows(true);
end.[/CODE]3. After reboot execute this script in AVPTool:
[CODE]begin
CreateQurantineArchive('C:\quarantine.zip');
end.[/CODE]Upload file C:\quarantine.zip, by link [URL]http://virusinfo.info/upload_virus.php?tid=64691[/URL]
4. Make a new log of AVPTool.[/QUOTE]
Done..i did all that and here is the new log and the quarantine
Your system seems to be clean. Do you have any problem more?
my system seems fine now..i noticed it became faster and the task manager is working again..i hope that lasts..i guess my anti-virus is not working well
thank you thank u so so much :rolleyes:
zkqshbwakeuo.exe - [B]Trojan.MulDrop.36526 (DrWEB)[/B]
is that thing still on my system?
[QUOTE=amr222222;542549]is that thing still on my system?[/QUOTE]
No, we have deleted this virus. :)
[QUOTE=Aleksandra;542564]No, we have deleted this virus. :)[/QUOTE]
Thank God...i was scared