Can you help me get this rookit off of my friend's pc? Thanks.
Printable View
Can you help me get this rookit off of my friend's pc? Thanks.
Close/unload all the programs
Switch off:
- Antivirus and, if you have - Firewall.
- [URL="http://virusinfo.info/showthread.php?t=9207"]Execute following script[/URL] in Manual Healing
[CODE]begin
SearchRootkit(true, true);
SetAVZGuardStatus(true);
QuarantineFile('C:\WINDOWS\system32\Iasv32.dll','');
QuarantineFile('C:\WINDOWS\system32\6to4v32.dll','');
DeleteFile('C:\WINDOWS\system32\6to4v32.dll');
DeleteFile('C:\WINDOWS\system32\Iasv32.dll');
DelAutorunByFileName('C:\WINDOWS\system32\6to4v32.dll');
DelAutorunByFileName('C:\WINDOWS\system32\Iasv32.dll');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.[/CODE]
After reboot:
- Execute following script in Manual Healing
[CODE]begin
CreateQurantineArchive('C:\quarantine.zip');
end.[/CODE]
- Upload the C:\quarantine.zip here: [URL="http://virusinfo.info/upload_virus_eng.php?tid=83713"]upload_virus_eng.[/URL]
- Make a new log file and Attach a new log to your new post..
Try to follow this instruction - [URL="http://support.kaspersky.com/viruses/solutions?qid=208280684"]http://support.kaspersky.com/viruses/solutions?qid=208280684[/URL]. After system checking and making a log which could be found in the system disk root directory, something like this - [B]C:\TDSSKiller.2.2.0_20.12.2009_15.31.43_log.txt.[/B], please attach this log to your new post here.