Printable View
Can't remove with removal tool, after reboot the infection is again in the memory. Pls help, if you can.
Sincerely, Ipconfig
Hi!
The rootkit removal, and the antivirus software doesn't worked. Problem solved somehow, with the Virus removal tool.
Sorry for bothering you.
Ipconfig
Switch off:
- Antivirus and and, if you have - Firewall.
- System Restore
- [URL="http://virusinfo.info/showthread.php?t=9207"]Execute following script[/URL] in Manual Healing
[CODE]begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
QuarantineFile('D:\autorun.inf','');
QuarantineFile('C:\autorun.inf','');
QuarantineFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\nvdis.exe','');
DeleteFile('.sys');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run','MicrosoftCorp');
DeleteFile('C:\DOCUME~1\Admin\LOCALS~1\Temp\nvdis.exe');
DeleteFile('C:\autorun.inf');
DeleteFile('D:\autorun.inf');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
[/CODE]
After reboot:
- [URL="http://virusinfo.info/showthread.php?t=9207"]Execute following script[/URL] in Manual Healing
[CODE]begin
CreateQurantineArchive('C:\quarantine.zip');
end.
[/CODE]
- Upload the C:\quarantine.zip here: [url]http://virusinfo.info/upload_virus_eng.php?tid=77968[/url]
- Repeat a log file.
- Attach a new log to your new post..