Some Virus

[Kipp]

Please help some virus send viruses using smtp
Here is atach
avptool_syscheck.zip

[drongo]

1.how do you know it ?
2. Please execute this script:

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('c:\program files\5ci\icafe client v1.0\icclie.exe','');
 QuarantineFile('C:\WINDOWS\system32\ntsim.sys','');
 QuarantineFile('c:\documents and settings\useric\useric.exe','');
BC_ImportAll;
BC_Activate;
RebootWindows(true);
end.

it will just copy some files, please find the quarantine folder in sub folder of avptool,
Zip it with password virus and send by http://virusinfo.info/upload_virus_eng.php?tid=38353

[Kipp]

i uploaded but IC Client is not virus
Here new attach time when sending mails
avptool_syscheck.zip
Помоги то и так уже сервер забанил наш ип за рассылку спама

[drongo]

Please, here in english. In Russian http://virusinfo.info/forumdisplay.php?f=46
useric.exe-Some fresh trojan.
drweb call it Trojan.DownLoad.28430, vba32( heuristic detection: BScope.Trojan.Inject.Gen)
here the script for curing: (remember, before execution: disconnect form internet, disable system restore and disable your antivirus)

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 TerminateProcessByName('c:\documents and settings\useric\useric.exe');
 DeleteFile('c:\documents and settings\useric\useric.exe');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

Please clean temp folders.

you can also can scan with latest cureit in safe mode and make a new log in avptool