da crazy.cat » gio nov 22, 2007 8:45 am
Prova questo script e poi posta il txt che esce al riavvio.
Files to delete:
C:\WINDOWS\system32\drivers\hidr.exe
C:\WINDOWS\system32\drivers\srosa.sys
C:\WINDOWS\system32\wintems.exe
C:\WINDOWS\system32\hldrrr.exe
C:\WINDOWS\system32\trusted.exe
C:\WINDOWS\system32\drivers\pci32.sys
C:\Documents and Settings\Guest\Impostazioni locali\Temporary Internet Files\Content.IE5\3XM3RF9F\free-avg_org[1].htm
C:\avenger\backup-20.11.2007-21.55.07,78.zip
C:\avenger\backup.zip
C:\Documents and Settings\WINDOWS\Impostazioni locali\Temp\SoftCab Webcam Spy 1.3.exe
C:\Programmi\Synaptics\SynTP\SynTPLpr.exe
C:\RECYCLER\S-1-5-21-2214282452-1067449900-1626225209-1004\Dc78.zip
C:\RECYCLER\S-1-5-21-2214282452-1067449900-1626225209-1004\Dc91.zip
folders to delete:
C:\WINDOWS\exefnd
C:\WINDOWS\exefld
registry keys to delete:
HKLM\SYSTEM\CurrentControlSet\Services\srosa
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_SROSA
HKLM\SYSTEM\CurrentControlSet\Services\pci32
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_PCI32
Quando i molti governano, pensano solo a contentar sé stessi, si ha allora la tirannia più balorda e più odiosa: la tirannia mascherata da libertà.