Показано с 1 по 2 из 2.

trozans

  1. #1
    Junior Member Репутация
    Регистрация
    09.09.2009
    Сообщений
    1
    Вес репутации
    31

    trozans

    there are many trozans in my computer, when i scanned my computer with kaspersky virus removal tool, almost all of them remained infected, some of the symptoms i have seen in my computer so far includes unability to display hidden files, disk drives open in separate windows and dipping speed of it. should i delete the infected files. Some of them have extension autorun.exe.
    Вложения Вложения

  2. #2
    Senior Member Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Аватар для Numb
    Регистрация
    04.10.2005
    Сообщений
    2,118
    Вес репутации
    847
    Hello.
    Yes, if virus removal tool defines these files as viruses and is unable to cure them, you should permit to delete them. After full scan, execute script:
    Код:
    begin
    SearchRootkit(true, true);
    SetAVZGuardStatus(True);
     QuarantineFile('I:\cj3k.exe','');
     QuarantineFile('I:\autorun.inf','');
     QuarantineFile('H:\cj3k.exe','');
     QuarantineFile('H:\autorun.inf','');
     QuarantineFile('F:\cj3k.exe','');
     QuarantineFile('E:\cj3k.exe','');
     QuarantineFile('E:\autorun.inf','');
     QuarantineFile('D:\cj3k.exe','');
     QuarantineFile('D:\autorun.inf','');
     QuarantineFile('C:\cj3k.exe','');
     QuarantineFile('C:\autorun.inf','');
     QuarantineFile('D:\DOCUME~1\kuku\LOCALS~1\Temp\herss.exe','');
     QuarantineFile('D:\DOCUME~1\kuku\LOCALS~1\Temp\cvasds0.dll','');
     DeleteFile('D:\DOCUME~1\kuku\LOCALS~1\Temp\cvasds0.dll');
     BC_DeleteFile('D:\DOCUME~1\kuku\LOCALS~1\Temp\cvasds0.dll');
     DeleteFile('D:\DOCUME~1\kuku\LOCALS~1\Temp\herss.exe');
     BC_DeleteFile('D:\DOCUME~1\kuku\LOCALS~1\Temp\herss.exe');
     DeleteFile('C:\autorun.inf');
     BC_DeleteFile('C:\autorun.inf');
     DeleteFile('C:\cj3k.exe');
     BC_DeleteFile('C:\cj3k.exe');
     DeleteFile('D:\autorun.inf');
     BC_DeleteFile('D:\autorun.inf');
     DeleteFile('D:\cj3k.exe');
     BC_DeleteFile('D:\cj3k.exe');
     DeleteFile('E:\autorun.inf');
     BC_DeleteFile('E:\autorun.inf');
     DeleteFile('E:\cj3k.exe');
     BC_DeleteFile('E:\cj3k.exe');
     DeleteFile('F:\autorun.inf');
     BC_DeleteFile('F:\autorun.inf');
     DeleteFile('F:\cj3k.exe');
     BC_DeleteFile('F:\cj3k.exe');
     DeleteFile('H:\autorun.inf');
     BC_DeleteFile('H:\autorun.inf');
     DeleteFile('H:\cj3k.exe');
     BC_DeleteFile('H:\cj3k.exe');
     DeleteFile('I:\autorun.inf');
     BC_DeleteFile('I:\autorun.inf');
     DeleteFile('I:\cj3k.exe');
     BC_DeleteFile('I:\cj3k.exe');
    BC_Activate;
    ExecuteSysClean;
    RebootWindows(true);
    end.
    After reboot, upload quarantine using the link http://virusinfo.info/upload_virus_eng.php?tid=54345 , as it's described in app. 3 of the rules of "Help me!" section and make new logs. You'd better make 3 logs as it's described in the same rules
    Последний раз редактировалось Numb; 10.09.2009 в 00:20.

Метки для этой темы

Свернуть/Развернуть Ваши права в разделе

  • Вы не можете создавать новые темы
  • Вы не можете отвечать в темах
  • Вы не можете прикреплять вложения
  • Вы не можете редактировать свои сообщения
  •  
Page generated in 0.00802 seconds with 16 queries