i really need help i have been a vitim of win32.sality and it spread in my computer and its so slow now and i lost many applications but i can't format it because i hae some important data, please help
Printable View
i really need help i have been a vitim of win32.sality and it spread in my computer and its so slow now and i lost many applications but i can't format it because i hae some important data, please help
[I]- Execute following script in avptool:[/I]
[code]
begin
ClearQuarantine;
SearchRootkit(true, true);
SetAVZGuardStatus(true);
QuarantineFile('C:\WINDOWS\system32\drivers\phrqm.sys','');
DeleteService('amsint32');
QuarantineFile('G:\tnqjpp.pif','');
QuarantineFile('G:\autorun.inf','');
QuarantineFile('F:\rhmvdf.pif','');
QuarantineFile('F:\autorun.inf','');
QuarantineFile('E:\fieuty.exe','');
QuarantineFile('E:\autorun.inf','');
QuarantineFile('D:\hfqglp.exe','');
QuarantineFile('D:\autorun.inf','');
QuarantineFile('C:\wgvxgi.pif','');
QuarantineFile('C:\autorun.inf','');
DeleteFile('C:\autorun.inf');
DeleteFile('C:\wgvxgi.pif');
DeleteFile('D:\autorun.inf');
DeleteFile('D:\hfqglp.exe');
DeleteFile('E:\autorun.inf');
DeleteFile('E:\fieuty.exe');
DeleteFile('F:\autorun.inf');
DeleteFile('F:\rhmvdf.pif');
DeleteFile('G:\autorun.inf');
DeleteFile('G:\tnqjpp.pif');
DeleteFile('C:\WINDOWS\system32\drivers\phrqm.sys');
BC_ImportALL;
ExecuteSysClean;
ExecuteRepair(11);
ExecuteRepair(17);
ExecuteWizard('TSW',2,2,true);
BC_Activate;
RebootWindows(true);
end.
[/code]
After reboot
[I]Execute script:[/I]
[code]
begin
CreateQurantineArchive('C:\quarantine.zip');
end.
[/code]
File [B]C:\quarantine.zip[/B] upload [B][url=http://virusinfo.info/upload_virus_eng.php?tid=88914]here[/url][/B]
Check your PC with [B][url=http://support.kaspersky.com/viruses/solutions?qid=208279889]SalityKiller[/url][/B]
Make a new log of avptool
Статистика проведенного лечения:
[LIST][*]Получено карантинов: [B]1[/B][*]Обработано файлов: [B]32[/B][*]В ходе лечения вредоносные программы в карантинах не обнаружены[/LIST]