• Announcements

    • Rodion Nagornov

      Недоступность форума // Forum maintenance   08/16/2017

      В связи с техническими работами форум будет недоступен с 20.00 (МСК) 18.08.2017. Максимальное время недоступности - до 20.00 (МСК) 20.08.2017. *** Due to maintenance forum will be unavailable since 8pm (+3 GMT) 18-Aug-2017. The longest possible time of maintenance - till 8.pm (+3 GMT) 20-Aug-2017.
Sign in to follow this  
Followers 0
nnamdiebere

Virus/Malware - Manual Disinfection

2 posts in this topic

Welcome. Run this script, instructions: http://support.kaspersky.com/avptool2011/start?qid=208284197

 

begin
SetAVZGuardStatus(True);
SearchRootkit(true, true);
QuarantineFile('C:\Users\NAMO\AppData\Roaming\Microsoft\Iaujos\iaujos.exe','');
StopService('ralepjej');
DeleteService('ralepjej');
QuarantineFile('C:\Windows\system32\drivers\ralepjej.sys','');
QuarantineFile('C:\Users\NAMO\AppData\Local\Windows Live\Microsoft Help\kzcwrf.dll','');
QuarantineFile('C:\Users\NAMO\AppData\Local\EyePower Games\zvshsxts.dll','');
DeleteFile('C:\Users\NAMO\AppData\Local\EyePower Games\zvshsxts.dll');
DeleteFile('C:\Users\NAMO\AppData\Local\Windows Live\Microsoft Help\kzcwrf.dll');
DeleteFile('C:\Windows\system32\drivers\ralepjej.sys');
RegKeyParamDel('HKEY_USERS','S-1-5-21-261894237-2431281210-1176148762-1001\Software\Microsoft\Windows\CurrentVersion\Run','EyePower Games');
DeleteFile('C:\Users\NAMO\AppData\Roaming\Microsoft\Iaujos\iaujos.exe');
RegKeyParamDel('HKEY_USERS','S-1-5-21-261894237-2431281210-1176148762-1001\Software\Microsoft\Windows\CurrentVersion\Run','Facebook Update');
RegKeyParamDel('HKEY_USERS','S-1-5-21-261894237-2431281210-1176148762-1001\Software\Microsoft\Windows\CurrentVersion\Run','kiinc');
BC_ImportAll;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

 

After run script, please see: Kaspersky Lab Forum > English User Forum > Virus-related issues > the first Important topic. There, you will find instructions for two logs.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0