sc.videofreeforonline.com

[skerlos]

If I am in my explorer and want to open a folder, it opens a window that says:

Attention, GIORGOS!
Some dangerous viruses detected in your system. Microsoft Windows XP files corrupted. This may lead to the destruction of important files in C:\WINDOWS. Download protection software now!
Click OK to download the antyspyware. (Recommended)

[drongo]

Sorry for waiting...
Please, disable your "anti" and disconnect from the internet !
Execute in AVPTools this script (from the box below )

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('c:\windows\system32\lkcitdl.exe','');
 QuarantineFile('c:\windows\system32\lktsrv.exe','');
 DelBHO('{1F88A6F5-908C-4C28-9A81-829953C5F5C5}');
 QuarantineFile('C:\WINDOWS\system32\LSYSTI~1.DLL','');
 QuarantineFile('C:\WINDOWS\system32\Drivers\xusbdfwu.sys','');
 QuarantineFile('C:\WINDOWS\system32\DRIVERS\emScan.sys','');
 QuarantineFile('C:\WINDOWS\system32\drivers\PWSYSDRV.sys','');
 QuarantineFile('C:\WINDOWS\system32\DRIVERS\adiusbaw.sys','');
 QuarantineFile('C:\WINDOWS\System32\drivers\XPC4DRVR.SYS','');
 QuarantineFile('C:\WINDOWS\system32\DRIVERS\3xHybrid.sys','');
 QuarantineFile('C:\WINDOWS\system32\drivers\usb6xxxk.dll','');
 QuarantineFile('C:\WINDOWS\System32\drivers\windrvr.sys','');
 QuarantineFile('C:\WINDOWS\system32\drivers\windrvr6.sys','');
 QuarantineFile('C:\WINDOWS\System32\drivers\nipalk.sys','');
 QuarantineFile('C:\WINDOWS\system32\lkcitdl.exe','');
 QuarantineFile('C:\WINDOWS\system32\nidscmem.dll','');
 QuarantineFile('C:\WINDOWS\system32\mmfinfo.dll','');
 QuarantineFile('C:\WINDOWS\system32\mkunicode.dll','');
 DeleteFile('C:\WINDOWS\system32\LSYSTI~1.DLL');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
ExecuteRepair(6);
ExecuteRepair(8);
ExecuteRepair(9);
ExecuteRepair(11);
RebootWindows(true);
end.

You computer will reboot( if it is not, do it yourself)

Pack ( zip) (with pass 'virus') "Qurantine_AVZ" ( it is subfolder where your avptool exist)
Please upload it by link http://virusinfo.info/upload_virus_eng.php?tid=31969


Then, please disable your internet connection, kaspersky, all messengers and other staff that you can.
Start your internet explorer, then with "windows explorer" please open some folder, as you did described.

Only after these simple steps, please make a new log in avp tool and attach it to your next post.

[skerlos]

thanx for the help

Before seeing your reply i've run a my one script and the problem solved. Anyway i run your script and sending u the file you requested.

thx anyway...

[drongo]

thanx for the help

Before seeing your reply i've run a my one script and the problem solved. Anyway i run your script and sending u the file you requested.

thx anyway...

Bad idea, don't do it again, ever.
Where the new log as i asked you for?

[skerlos]

Bad idea, don't do it again, ever.
Where the new log as i asked you for?

I uploaded it with the link http://virusinfo.info/upload_virus_eng.php?tid=31969

Добавлено через 4 минуты

my script was something like this:

[drongo]

No and no ! you should attach your logs to your answer, quarantine should be upoladed by "red' link. Does it so hard to understand ?

[skerlos]

lol i upload my quarantine file.

why are u so angry????