Hello
I've got this too, but I've created the script, but i've made 5 attemps to send to kapersky virus lab and kapersky technical, but they bounce it back syaing im doing it wron.
I've got a cabinet Ive got a activation code on AV2010 but I can't get though.
I don ;'t understnad how to use this scrip thing to get rid of the virus -somwehere it says dont run it your self
Over a week and been unable to acces the kpaersky support.
Unless i get some help soon from somewhere, my pc will out of the window
How do i use the support system .
I even tried posting things here but they get rejcted
ive uploaded the sysinfor file
Full Version: I don ;'t understnad how to use this scrip thing [Split]
QUOTE(richbuff @ 27.10.2009 05:07) 
Welcome. Please attach the zipped virusinfo_syscure.zip; instructions, see: http://forum.kaspersky.com/index.php?s=&am...st&p=678334 Download AVZ from here: http://www.malwarecrawler.com/a-v-z.exe
Hello Bunbury here
So depressed with my computer troubles I downloaded the malward crawler file and ran it, but KAV2010 told it was a suspicious program trying to infiltrate mys systme and recommende I temrinate it.
SHould I allow this thing ot run ? Will it get rid of my virus ?
Welcome. That instruction was posted for another person. The Important read me topic provides guidelines about opening a new topic for yourself, what logs and information to provide, and also states to not follow instructions found in other peoples disinfection threads.
Run this script, instructions: http://forum.kaspersky.com/index.php?s=&am...st&p=678328 PC will reboot:
After run script, attach a Combofix log, please review and follow these instructions carefully.
Before Saving combofix to Desktop, please rename combofix to something like 123.exe to stop malware from disabling it.
Now, please make sure no other programs are running, close all other windows and pause Kaspersky (right click the K icon and click pause protection > Choose the
option "resume manually" if still active) until after the scanning and removal process has taken place.
Please double click on the file you downloaded. Follow the onscreen prompts to start the scan.
Once the scanning process has started please DO NOT click on the Combofix window or attempt to use your computer as this can cause the scanning process to stall.
It may take a while to complete scanning and this is normal.
You will be disconnected from the internet and your desktop icons/toolbars will disappear during scanning, do not worry, this is normal and it will be restored after
scanning has completed.
Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please attach it to your next post. Also, please don't
forget to resume the Kaspersky that you paused.
Download Combofix here -> http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Run this script, instructions: http://forum.kaspersky.com/index.php?s=&am...st&p=678328 PC will reboot:
CODE
begin
SetAVZGuardStatus(True);
SearchRootkit(true, true);
QuarantineFile('C:\ProgramDataadb7f7\WE0adb.exe','');
QuarantineFile('C:\Program Files\Antispyware\Antispyware.exe','');
DeleteFile('C:\Program Files\Antispyware\Antispyware.exe');
DeleteFile('C:\ProgramDataadb7f7\WE0adb.exe');
RegKeyParamDel('HKEY_USERS','S-1-5-21-3883548933-1247309560-1574940144-1000\Software\Microsoft\Windows\CurrentVersion\Run','Windows Enterprise Defender');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Windows Enterprise Defender');
RegKeyParamDel('HKEY_USERS','S-1-5-21-3883548933-1247309560-1574940144-1000\Software\Microsoft\Windows\CurrentVersion\Run','Antispyware');
ExecuteRepair(13);
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
SetAVZGuardStatus(True);
SearchRootkit(true, true);
QuarantineFile('C:\ProgramDataadb7f7\WE0adb.exe','');
QuarantineFile('C:\Program Files\Antispyware\Antispyware.exe','');
DeleteFile('C:\Program Files\Antispyware\Antispyware.exe');
DeleteFile('C:\ProgramDataadb7f7\WE0adb.exe');
RegKeyParamDel('HKEY_USERS','S-1-5-21-3883548933-1247309560-1574940144-1000\Software\Microsoft\Windows\CurrentVersion\Run','Windows Enterprise Defender');
RegKeyParamDel('HKEY_LOCAL_MACHINE','Software\Microsoft\Windows\CurrentVersion\Run','Windows Enterprise Defender');
RegKeyParamDel('HKEY_USERS','S-1-5-21-3883548933-1247309560-1574940144-1000\Software\Microsoft\Windows\CurrentVersion\Run','Antispyware');
ExecuteRepair(13);
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
After run script, attach a Combofix log, please review and follow these instructions carefully.
Before Saving combofix to Desktop, please rename combofix to something like 123.exe to stop malware from disabling it.
Now, please make sure no other programs are running, close all other windows and pause Kaspersky (right click the K icon and click pause protection > Choose the
option "resume manually" if still active) until after the scanning and removal process has taken place.
Please double click on the file you downloaded. Follow the onscreen prompts to start the scan.
Once the scanning process has started please DO NOT click on the Combofix window or attempt to use your computer as this can cause the scanning process to stall.
It may take a while to complete scanning and this is normal.
You will be disconnected from the internet and your desktop icons/toolbars will disappear during scanning, do not worry, this is normal and it will be restored after
scanning has completed.
Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please attach it to your next post. Also, please don't
forget to resume the Kaspersky that you paused.
Download Combofix here -> http://download.bleepingcomputer.com/sUBs/ComboFix.exe
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.