« previous next »
Pages: [1]   Go Down

Author Topic: Win32:Deecee  (Read 2139 times)

0 Members and 1 Guest are viewing this topic.

Nordican

  • Guest
Win32:Deecee
« on: March 17, 2009, 07:24:52 PM »
Hello. Please help me to remove this worm. Avast found  it in "System Volume Information" on one of  my disks. Every time I delete damaged file but it looks like still didnt cured. What  should I do ?
Logged

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: Win32:Deecee
« Reply #1 on: March 17, 2009, 07:33:50 PM »
Disable System Restore:
http://support.microsoft.com/kb/310405

Scan the system with avast! and re-enable System Restore after you clean everything.
That should do the trick.
Logged
Visit my webpage Angry Sheep Blog

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Win32:Deecee
« Reply #2 on: March 17, 2009, 11:10:18 PM »
I suggest:

1. Clean your temporary files.
2. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
3. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete them.
4. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
5. Make a HijackThis log to post here or this analysis site. Or even submit the RunScanner log to to on-line analysis.
6. Disable System Restore and then reenable it again.
7. Immunize your system with SpywareBlaster.
8. Check if you have insecure applications with Secunia Software Inspector.
Logged
The best things in life are free.
Pages: [1]   Go Up
« previous next »