I can't remove a virus

[hb71]

Hello,

I have done a system scan with Kapersky. It found many threats and removed them all. The next day I restarted my computer and it seems that I still have the virus. Pop-up windows keep coming up, some of them telling me I have a virus and asking for downloading something.

I did a manual cure with Kapersky and now the programm proposed me to send you the log file for helping me.

Thank you for your help.

[Rene-gad]

Close/unload all the programs excepted AVZ and Internet Explorer

Switch off:
- Antivirus and and, if you have - Firewall.
- System Restore


- Execute following script

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('/C.exe','');
 QuarantineFile('C:\.X','');
 QuarantineFile('D:\.X','');
 QuarantineFile('E:\.X','');
 QuarantineFile('G:\.X','');
 QuarantineFile('H:\.X','');
 QuarantineFile('I:\.X','');
 QuarantineFile('C:\WINDOWS\system32\fqkneyqh.dll','');
 QuarantineFile('C:\WINDOWS\system32\vcmsdx.dll','');
 QuarantineFile('C:\WINDOWS\system32\detoured.dll','');
 QuarantineFile('C:\WINDOWS\system32\wxvault.dll','');
 DeleteFile('C:\WINDOWS\system32\vcmsdx.dll');
 DeleteFile('C:\WINDOWS\system32\fqkneyqh.dll');
 DeleteFile('I:\.X');
 DeleteFile('H:\.X');
 DeleteFile('G:\.X');
 DeleteFile('F:\.X');
 DeleteFile('E:\.X');
 DeleteFile('D:\.X');
 DeleteFile('C:\.X');
 DeleteFile('/C.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

After reboot:
- Clean Temp-Maps, Cache of Browsers, Recycler. Use Windows service tool cleanmgr or CCleaner or ClearProg
- Close all the programs and start only Internet Explorer!!!
- Repeat 3 log files in accordance with the rules.
- Switch Antivirus and, if you have - Firewall, on.
- Go On-Line
- Upload the quarantine in accordance with Appx. 3 of the rules.
- Attach 3 logs to your new post..

[hb71]

Thank you for the script.

I can't deactivate the antivirus because it is running from our server and I don't have the access to it. Is it a problem?

[drongo]

It could be a problem,a script will might don't work correctly, at least disconnect from your network.

[hb71]

Thank you for your help. But I couldn't do anything anymore on my computer. I couldn't download the files you mentionned or get them to run. Then I couldn't log into Windows anymore it crashed all the time. I could only log on safe mode.

So after talking to my IT guy I formated my computer and reinstalled Windows. Thanks for you help anyways.