Other > Viruses and worms

"Anti Virus" by designte.com has attacked me. Can't clean it up.

<< < (8/10) > >>

gregory_ellis:
OK. Try this:

http://www.mediafire.com/?hzds6r9zx95fm

gregory_ellis:
As to my problems.

OK. I had (don't know if it is gone yet) the Backdoor.Tidserv!inf Virus. I THINK that requires a manual removal. The problem is I do NOT have a disk with the Windows Recovery Console. There appears to be the program on my HDD BUT when I put in the Windows XP-Pro with SP3 disk, it fails to recognize the hard drive. Dead end.

I have been unable to do a system recovery. It pops up but the buttons do NOTHING. Dead end.

The blasted CD tray pops open randomly (unless, of course, I WANT it to).

Finally, I live in Ohio of the USA. I do not think you can help with this matter, though.

Thanks for all, so far.

essexboy:
Not much showing on the analysis log which is good.  Are you still showing the  Backdoor.Tidserv!inf alerts ?

OK two things to do, first I will remove some items with AVP and then try a scandisc.  The opening and closing of the CD drive happened to me once - just before it failed

 [*]Re-run AVPTool
[*]Select the Manual Disinfection tab
[*]Where it states Step 3 paste in the following disinfection script and press execute

[/list]
--- Code: ---begin
SetAVZPMStatus(True);
SearchRootkit(true, true);
SetAVZGuardStatus(True);
 DelBHO('{472734EA-242A-422b-ADF8-83D1E48CC825}');
 RegKeyParamDel('HKEY_USERS','.DEFAULT\Control Panel\Desktop','scrnsave.exe');
 RegKeyParamDel('HKEY_LOCAL_MACHINE','SYSTEM\CurrentControlSet\Services\Eventlog\Application\ACW_DE','EventMessageFile');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.
--- End code ---
[*]Your system will reboot on completion, if it does not please do so yourself
[*]On completion please run another analysis scan and attach the zip file
[/list]



THEN

Go to start > All Programs > Accessories
Click Command Prompt
When the prompt opens type the following bolded text and press enter

sfc /scannow (Note: There is a space between sfc and /scannow)

On completion reboot, let me know of any errors that it detected. 

gregory_ellis:
SCAN:

http://www.mediafire.com/?d4lqzk8nc7tdqne


No, I have not seen the Backdoor.Tidserv!inf except in an old scan using Hijack This, which saidit was a manual remove only.

essexboy:
Are you having any problems now ?

Navigation

[0] Message Index

[#] Next page

[*] Previous page