Virus created two undeletable IE shortcuts

[lukas1321]

Hello everyone,
I am very new to this forum, I wanted to get some help here.
Some virus created two IE shortcuts that I can't delete.

I tried to edit the registry, but no use.
I don't know what it could be.
I wonder if you can help me out.

PS: I can't speak Russian fluently, that's why I wrote the thread in English

[Rene-gad]

Hello,

Close/unload all the programs excepted AVZ and Internet Explorer

Switch off:
- Antivirus and and, if you have - Firewall.
- System Restore

- Execute following script in Manual Healing

begin
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 QuarantineFile('C:\Windows\system32\Drivers\ov519vid.sys','');
 QuarantineFile('Srskaut.sys','');
 QuarantineFile('C:\Program Files\Fotonija\Anglonas\Anglonas.exe','');
 StopService('Srskaut');
 DeleteService('Srskaut');
 BC_DeleteSvc('Srskaut');
 DeleteFile('Srskaut.sys');
 DeleteFile('C:\Windows\system32\Drivers\Srskaut.sys');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

After reboot:
- Execute following script in Manual Healing

begin
CreateQurantineArchive('C:\quarantine.zip');    
end.

- Upload the C:\quarantine.zip here: http://virusinfo.info/upload_virus_eng.php?tid=85398
- Make a new log file of AVPTool
- Make a log file of Malwarebytes Antimalware: http://www.malwarebytes.org/mbam.php
- Attach a new log to your new post..

[lukas1321]

After first code execution all my icons have disappeared and my Start menu doesn't show up when clicked the Start button :'( And those IE shortcuts aren't gone :'(

And I noticed that Anglonas was included in the code. It's my English-Lithuanian dictionary. I must've left it open

[Rene-gad]

OK, I just wanted to quarantine it

QuarantineFile('C:\Program Files\Fotonija\Anglonas\Anglonas.exe','');

Pls. remove all founds with MBAM.
Possibly you should configure your desktop after it.

[lukas1321]

Pls. remove all founds with MBAM.

I have removed the infections and those icons have gone.
And I found the problem: corrupted IconCache.db file. I copied the file (C:\Users\(User)\AppData\Local\IconCache.db) from my friend's computer and replaced it with my friend's file. And my icons returned.
Thank you for your help.
All problems solved. Please close the thread.

[Rene-gad]

All problems solved.

OK, ty for feedback Have a nice weekend

[CyberHelper]

Статистика проведенного лечения:

• Получено карантинов: 1
• Обработано файлов: 8
• В ходе лечения вредоносные программы в карантинах не обнаружены