W32/Malware!Gemini

[Zoeld]

Sorry, for being a newcomer.

Cannot run Kaspersky Virus Removal Tool 2010 (in Safe Mode) because it keeps saying: "Database is corrupted".

Kindly see "AVPtool SYSinfo" in attachment.

Please help!

[Rene-gad]

Hello,
Pls. run your system in NORMAL MODE.

Close/unload all the programs excepted AVZ and Internet Explorer

Switch off:
- Antivirus and and, if you have - Firewall.
- System Restore


- Execute following script in Manual Healing

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
ClearQuarantine;
 QuarantineFile('c:\program files\norton pc checkup\pc_checkup.exe','');
 DelBHO('{500BCA15-57A7-4eaf-8143-8C619470B13D}');
 QuarantineFile('C:\WINDOWS\system32\msxml71.dll','');
 QuarantineFile('C:\WINDOWS\msa.exe','');
 DeleteFile('C:\WINDOWS\msa.exe');
 DeleteFile('C:\WINDOWS\system32\msxml71.dll');
 DeleteFile('c:\program files\norton pc checkup\pc_checkup.exe');
 DeleteFileMask('c:\program files\norton pc checkup\','*.*',true);
 DeleteDirectory('c:\program files\norton pc checkup\');
 DeleteFile('C:\WINDOWS\tasks\At1.job');
 DeleteFile('C:\WINDOWS\tasks\At1.jobb');
 DeleteFile('C:\WINDOWS\tasks\{7B02EF0B-A410-4938-8480-9BA26420A627}.job');
ExecuteWizard('TSW', 2, 2, true);
ExecuteWizard('SCU', 2, 2, true);
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
SetAVZPMStatus(True);
RebootWindows(true);
end.

After reboot:
- Execute following script in Manual Healing

begin
CreateQurantineArchive('C:\quarantine.zip');    
end.

- Upload the C:\quarantine.zip here: http://virusinfo.info/upload_virus_eng.php?tid=85274
- Make a new log file of AVPTool
- Make a log file of Malwarebytes Antimalware: http://www.malwarebytes.org/mbam.php
- Attach both logs to your new post..