PLS ADVICE

[kobaguli]

I got a virus - "your-sister-naked-hahahaha.pif" from skype chat and it sends itself to all in my contact list. No antivirus can clean it and it keeps sending it.

Thanks in advance
Brgds

[drongo]

Switch off:
- Antivirus and and, if you have - Firewall
- an internet connection

Execute following script ( http://virusinfo.info/showthread.php?t=9207 )

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\Program Files\Common Files\Logitech\LVMVFM\LVPrcInj.dll','');
 DelBHO('{100EB1FD-D03E-47FD-81F3-EE91287F9465}');
 QuarantineFile('C:\Program Files\ShoppingReport\Bin\2.0.26\ShoppingReport.dll','');
 QuarantineFile('C:\RECYCLER\S-1-5-21-1672468827-6449781164-452146685-5008\winservices.exe','');
 QuarantineFile('C:\WINDOWS\system32\drivers\Smapint.sys','');
 QuarantineFile('C:\WINDOWS\System32\drivers\TDSMAPI.SYS','');
 QuarantineFile('C:\WINDOWS\system32\drivers\LVPrcMon.sys','');
 QuarantineFile('C:\WINDOWS\system32\drivers\lvmvdrv.sys','');
 QuarantineFile('C:\WINDOWS\system32\drivers\Lvckap.sys','');
 QuarantineFile('C:\WINDOWS\system32\AIBMRUNL.dll','');
 DeleteFile('C:\RECYCLER\S-1-5-21-1672468827-6449781164-452146685-5008\winservices.exe');
 DeleteFile('C:\Program Files\ShoppingReport\Bin\2.0.26\ShoppingReport.dll');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
 ExecuteRepair(6);
 ExecuteRepair(8);
 ExecuteRepair(9);
RebootWindows(true);
end.

After reboot:
- Clean Temp-Maps, Cache of Browsers, Recycler. Use Windows service tool cleanmgr or CCleaner or ClearProg
- Close all the programs and start only Internet Explorer!!!
- Repeat 3 log files in accordance with the rules.
- Switch Antivirus and, if you have - Firewall, on.
- Go On-Line
- Upload the quarantine over the link Upload quarantined files on the top of this page.
- Attach 3 logs to your new post..