Can you help me remove this virus which your tool has detected.
Thanks
Tommac
Printable View
Can you help me remove this virus which your tool has detected.
Thanks
Tommac
Hi,
Switch off/Disable:
- Antivirus and and, if you have - Firewall.
- System Restore
- Run Kaspersky Virus Removal Tool in NORMAL MODE "AS ADMINISTRATOR"
- [URL="http://virusinfo.info/showthread.php?t=9207"]Execute following script[/URL] in Manual disinfection
[CODE]begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
ClearQuarantine;
QuarantineFile('C:\Windows\system32\Dell\SYSTEM~1\SysPro.exe','');
QuarantineFile('C:\Windows\System32\Drivers\saroef.sys','');
DeleteFile('C:\Windows\System32\Drivers\saroef.sys');
DeleteService('saroef');
RegKeyResetSecurity('HKLM','SYSTEM\CurrentControlSet\Services\saroef');
ExecuteWizard('TSW', 2, 2, true);
ExecuteWizard('SCU', 2, 2, true);
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
SetAVZPMStatus(True);
RebootWindows(true);
end.
[/CODE]
After reboot [URL="http://virusinfo.info/showthread.php?t=9207"]execute following script[/URL] in Manual disinfection
[code]begin
CreateQurantineArchive('C:\quarantine.zip');
end.
[/code]and upload the C:\quarantine.zip over the link [COLOR="Red"][B]Upload quarantined files[/B][/COLOR] on the top of this page.
- Make a new log file of Kaspersky Virus Removal Tool in NORMAL MODE.
- Attach a log to your new post..
[B][COLOR="Red"]Important: unpatched system causes many problems: you have to install Service Pack 2 + all updates.[/COLOR][/B]
I am sorry but cannot get this to run in Normal mode. My computer is rebooting after 1 minute in Normal mode and the script does not work in Safe mode.
Do you have any ideas please?
Tom