thanx
thanx
Could you please describe your problem?
Meantime, please disconnect from internet, temporary unload/disable your antivirus , antispyware (all of them! ) and firewall.
- Execute following script in kaspersky virus removal tool: (http://avptool.virusinfo.info/en/AVP...curescript.htm)
Your computer will reboot, then you will find the quarantine in kaspersky virus removal tool folder.Код:begin SearchRootkit(true, true); SetAVZGuardStatus(True); QuarantineFile('C:\Program Files\AskBarDis\bar\bin\askBar.dll',''); QuarantineFile('C:\WINDOWS\system32\Drivers\pssdk41.sys',''); QuarantineFile('C:\WINDOWS\system32\Drivers\PsSdk30.drv',''); QuarantineFile('C:\WINDOWS\system32\Drivers\PsSdk23.drv',''); QuarantineFile('C:\WINDOWS\system32\53.tmp',''); QuarantineFile('C:\WINDOWS\system32\drivers\pavboot.sys',''); QuarantineFile('%WinDir%\killer.exe',''); BC_ImportAll; BC_Activate; RebootWindows(true); end.
Do upload the quarantine ( how-to http://avptool.virusinfo.info/en/AVP...fileattach.htm ) Please,don't forget password protection, password that you should use is virus
*Нажми и выполни, если хочешь чтобы помощь улучшилась и ускорилась
*MyFirefox Portable
special avz @ rapidshare.com
md5: 2091925798B7909E010E3F7E328C5F0D
One problem is my computer is running slower than it used to also the mouse freezes for no reason
on start up u have to wait a few minutes before u can do anything this wouldn't happen before although i had the same number of items in the toolbar
i did not upload the quarantine folder because it was empty??
thanx
This script not for curing, just for copying.It doesn't change anything in your system.So, your problems should be exist after execution this script.No more, no less.
Please download in my signature special avz version, disable all your "anti" and execute it ( http://virusinfo.info/showthread.php?t=92070 ). Upload your quarantine according Appendix #3 in our rules http://virusinfo.info/showthread.php?t=9184
*Нажми и выполни, если хочешь чтобы помощь улучшилась и ускорилась
*MyFirefox Portable
special avz @ rapidshare.com
md5: 2091925798B7909E010E3F7E328C5F0D
Here are the files virus is the quarantined folder with password virus and also the log file which does not have a password
thanx
Последний раз редактировалось drongo; 12.01.2009 в 22:34.
why you did not read an appendix3 of our rules?
Here your link for uploading a quarantine: http://virusinfo.info/upload_virus_eng.php?tid=37057 Please,do it now.
In your log.zip were logs with quarantine- it is not allowed too.
Read carefully: http://virusinfo.info/showthread.php?t=9184
*Нажми и выполни, если хочешь чтобы помощь улучшилась и ускорилась
*MyFirefox Portable
special avz @ rapidshare.com
md5: 2091925798B7909E010E3F7E328C5F0D
logs were not with the quarantine files
i uploaded the file
thanx
They was and because of this your attachment was deleted.
Tip: don't archive all files that you have in folder, just attach those files that you should according to rules.
Добавлено через 7 минут
we did get an answer from virus analist, the file that you send us- clean
guard32.dll- it is from comodo firewall.
what about files that i did request from you ?
you can try to find them manually. Read appendix #2 of the rules.
Код:askBar.dll pssdk41.sys PsSdk30.drv PsSdk23.drv 53.tmp pavboot.sys killer.exe
Последний раз редактировалось drongo; 13.01.2009 в 10:47. Причина: Добавлено
*Нажми и выполни, если хочешь чтобы помощь улучшилась и ускорилась
*MyFirefox Portable
special avz @ rapidshare.com
md5: 2091925798B7909E010E3F7E328C5F0D
i cannot upload the files requested as i they do not get added to the quarantine folder AVZ gives the following error quarqntine file: failed (error) atempt of dierct disc reading (askbar.dll)
quarqntine file (dierct disc reading) "%S" - failed (error)
It is a good sign so they must to be clean.
did you tried manually archive them with winzip ? you can try, it is not a big deal just remember to add password protection . Passoword is virus
*Нажми и выполни, если хочешь чтобы помощь улучшилась и ускорилась
*MyFirefox Portable
special avz @ rapidshare.com
md5: 2091925798B7909E010E3F7E328C5F0D
what to do because my pc is still running slow?????
i cannot manually archive them because all of them give the same error
this is strange...try in safe mode (you know, restart computer and push on F8 )
also, please attach to your post the virusinfo_syscure.zip, that you did created from special avz, but not virusinfo_cure.zip !!!
Also, download cureit ( ftp://ftp.drweb.com/pub/drweb/cureit/launch.exe ) and make a full scan in safe mode.Let us know, what it will find if any.
Последний раз редактировалось drongo; 13.01.2009 в 22:29.
*Нажми и выполни, если хочешь чтобы помощь улучшилась и ускорилась
*MyFirefox Portable
special avz @ rapidshare.com
md5: 2091925798B7909E010E3F7E328C5F0D
ok heres the file u requested and ill do the scans
thanx
Your main problem of"My computer freezes and you type a website it takes you to something else and then multiple tabs pop up. "it is because of your attitude to computer security. You should uninstall super antyspyware, spydoctor, spybot S&D, also something from panda...
Comodo firewall you need uninstall too and download and install the latest one(remember to choose a costume installation and uncheck an antivirus installation and 'Toolbar' + 'Home Page'(the true, it is kind of search adware= askbar.)
Do you need an extra protection? Fine, there are no need to install every possible "anti" that you can find- just use in windows a limited account by default
The better way to solve your problems is to uninstall every " anti",and then execute this script:
, install only your a favorite antivirus(basically it has an antispyware too, i am afraid the freeware avg hasn't-you can in this case use an avg-antispyware) and firewall ( the latest comodo has hips protection also, so it is enough )Код:begin SearchRootkit(true, true); SetAVZGuardStatus(True); RegKeyDel('HKLM','SOFTWARE\Microsoft\Code Store Database\Distribution Units\{FFB3A759-98B1-446F-BDA9-909C6EB18CC7}'); QuarantineFile('C:\WINDOWS\Downloaded Program Files\pcpitstop2.dll',''); QuarantineFile('C:\WINDOWS\DOWNLO~1\GAMELA~1.OCX',''); DelBHO('{3041d03e-fd4b-44e0-b742-2d9b88305f98}'); DelBHO('{7E853D72-626A-48EC-A868-BA8D5E23E045}'); DelBHO('{201f27d4-3704-41d6-89c1-aa35e39143ed}'); QuarantineFile('C:\Program Files\AskBarDis\bar\bin\askBar.dll',''); DeleteService('PsSdk41'); QuarantineFile('C:\WINDOWS\system32\Drivers\pssdk41.sys',''); DeleteService('PsSdk30'); QuarantineFile('C:\WINDOWS\system32\Drivers\PsSdk30.drv',''); DeleteService('PSSdk23'); QuarantineFile('C:\WINDOWS\system32\Drivers\PsSdk23.drv',''); DeleteService('MEMSWEEP2'); QuarantineFile('C:\WINDOWS\system32\53.tmp',''); QuarantineFile('C:\WINDOWS\system32\Drivers\SBKUPNT.SYS',''); DeleteFile('C:\WINDOWS\system32\53.tmp'); DeleteFile('C:\WINDOWS\system32\Drivers\PsSdk23.drv'); DeleteFile('C:\WINDOWS\system32\Drivers\PsSdk30.drv'); DeleteFile('C:\WINDOWS\system32\Drivers\pssdk41.sys'); DeleteFile('C:\Program Files\AskBarDis\bar\bin\askBar.dll'); DeleteFile('C:\WINDOWS\Downloaded Program Files\pcpitstop2.dll'); BC_ImportAll; ExecuteSysClean; BC_Activate; ExecuteRepair(6); ExecuteRepair(7); ExecuteRepair(8); ExecuteRepair(9); RebootWindows(true); end.
After reboot install your protection software and if you find the quarantine(please read appendix 2 in our rules) please upload by link:http://virusinfo.info/upload_virus_eng.php?tid=37057
Please do all logs according to ours rules.
Последний раз редактировалось drongo; 14.01.2009 в 13:49.
*Нажми и выполни, если хочешь чтобы помощь улучшилась и ускорилась
*MyFirefox Portable
special avz @ rapidshare.com
md5: 2091925798B7909E010E3F7E328C5F0D