IPB

Welcome Guest ( Log In | Register )

 
Reply to this topicStart new topic
> Virus/Malware - Manual Disinfection, auto virus scan ineffective
NaMO Skee
post 14.05.2013 22:24
Post #1


Newbie
*

Group: Members
Posts: 1
Joined: 14.05.2013




The virus/malware program cannot be removed automatically. Need Help
Attached File(s)
Attached File  avptool_sysinfo.zip ( 27.36K ) Number of downloads: 5
 
Go to the top of the page
 
+Quote Post
richbuff
post 15.05.2013 04:27
Post #2


Oldtimer
****************

Group: Moderators
Posts: 48544
Joined: 14.06.2007




Welcome. Run this script, instructions: http://support.kaspersky.com/avptool2011/start?qid=208284197

CODE
begin
SetAVZGuardStatus(True);
SearchRootkit(true, true);
QuarantineFile('C:\Users\NAMO\AppData\Roaming\Microsoft\Iaujos\iaujos.exe','');
StopService('ralepjej');
DeleteService('ralepjej');
QuarantineFile('C:\Windows\system32\drivers\ralepjej.sys','');
QuarantineFile('C:\Users\NAMO\AppData\Local\Windows Live\Microsoft Help\kzcwrf.dll','');
QuarantineFile('C:\Users\NAMO\AppData\Local\EyePower Games\zvshsxts.dll','');
DeleteFile('C:\Users\NAMO\AppData\Local\EyePower Games\zvshsxts.dll');
DeleteFile('C:\Users\NAMO\AppData\Local\Windows Live\Microsoft Help\kzcwrf.dll');
DeleteFile('C:\Windows\system32\drivers\ralepjej.sys');
RegKeyParamDel('HKEY_USERS','S-1-5-21-261894237-2431281210-1176148762-1001\Software\Microsoft\Windows\CurrentVersion\Run','EyePower Games');
DeleteFile('C:\Users\NAMO\AppData\Roaming\Microsoft\Iaujos\iaujos.exe');
RegKeyParamDel('HKEY_USERS','S-1-5-21-261894237-2431281210-1176148762-1001\Software\Microsoft\Windows\CurrentVersion\Run','Facebook Update');
RegKeyParamDel('HKEY_USERS','S-1-5-21-261894237-2431281210-1176148762-1001\Software\Microsoft\Windows\CurrentVersion\Run','kiinc');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.


After run script, please see: Kaspersky Lab Forum > English User Forum > Virus-related issues > the first Important topic. There, you will find instructions for two logs.


--------------------
Please see the Important topics, located at the top of this section, and at the top of other sections of this forum.
Go to the top of the page
 
+Quote Post

Reply to this topicStart new topic

 



Lo-Fi Version Time is now: 28.07.2014 14:19