Hi,
I have a virus/trojan. Tried to install kaspersky product - does not allow says: you may have severe infection etc ... download virus upload tool.
Internet does not work. System Restore does not work. The virus or trojan is a program which looks like a virus scanner ... you cannot click it away.
I did downloaded virus tool from kaspersky and I hereby send the log. I am sending this from another computer.
Please help.
Desviedanje.
Hello,
pls. load PC in normal mode.
Remove AVG, it cannot be recommended to use 2 antiviruses simultaneously .
Close/unload all the programs excepted AVPTool and Internet Explorer
Switch off:
- Antivirus and and, if you have - Firewall.
- System Restore
- [URL="http://virusinfo.info/showthread.php?t=9207"]Execute following script[/URL] in Manual Healing
[CODE]begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
DeleteFile('%windir%\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job');
QuarantineFile('C:\DOCUME~1\VERSCH~1\LOCALS~1\Temp\Yhy.exe','');
QuarantineFile('C:\Documents and Settings\Verschuren\Local Settings\Application Data\gqiwqqcaa\phspemushdw.exe','');
QuarantineFile('C:\Documents and Settings\Verschuren\Application Data\ppbwqxchw\pynqxalshdw.exe','');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','galoxanh');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','ytfrndrk');
DeleteFile('C:\Documents and Settings\Verschuren\Application Data\ppbwqxchw\pynqxalshdw.exe');
DeleteFile('C:\Documents and Settings\Verschuren\Local Settings\Application Data\gqiwqqcaa\phspemushdw.exe');
DeleteFile('C:\DOCUME~1\VERSCH~1\LOCALS~1\Temp\Yhy.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
[/CODE]
After reboot:
- [URL="http://virusinfo.info/showthread.php?t=9207"]Execute following script[/URL] in Manual Healing
[CODE]begin
CreateQurantineArchive('C:\quarantine.zip');
end.
[/CODE]
- Upload the C:\quarantine.zip here: [url]http://virusinfo.info/upload_virus_eng.php?tid=85373[/url]
- Make a new log file of AVPTool
- Attach a new log to your new post..