Need Help In Removal Of Vbs.pica.e@mm

I am using BD anitvirus plus v10. I used it to scan for the location of the viruses as the 'virus alert' window keeps poping up. The results were that it can be found in the System Volume Information [autorun.inf=>(unicode) and ms32.dll.vbs=>(unicode)] and cant be disinfected and moved. All my HDD and thumbdrives have been affected. What is this and why is this happening? Is there any solution?

Find more posts tagged with

Comments

Cd-MaN

The given files are located in the System Restore subdirectory, where Windows prevents them from being deleted. You should disable and the re-enable System Restore to get rid of the specific files. You can do this by going to the Control Panel -> System -> System Restore, checking "Turn off System Restore for all drives", then clicking apply, after which uncheck it and click apply again.

abcd0_12340

The given files are located in the System Restore subdirectory, where Windows prevents them from being deleted. You should disable and the re-enable System Restore to get rid of the specific files. You can do this by going to the Control Panel -> System -> System Restore, checking "Turn off System Restore for all drives", then clicking apply, after which uncheck it and click apply again.

tried what you told me to do so. but it didnt work.

alexcrist

tried what you told me to do so. but it didnt work.

Try to repeat the steps, but disable BD realtime protection before doing so.

After you disable/re-enable System Restore, re-enable BD realtime protection and scan your system to see if the infections were removed.

Cris.

abcd0_12340

Try to repeat the steps, but disable BD realtime protection before doing so.

After you disable/re-enable System Restore, re-enable BD realtime protection and scan your system to see if the infections were removed.

Cris.

It really didn't work. I still receive alerts like this:

alexcrist

Hello abcd0_12340,

As a last resort, try following the steps described here to delete the infected file:

http://forum.bitdefender.com/index.php?showtopic=1054

Cris.

abcd0_12340

Hello abcd0_12340,

As a last resort, try following the steps described here to delete the infected file:

http://forum.bitdefender.com/index.php?showtopic=1054

Cris.

tried and the file wad able to be deleted but when i log in, the file appears again. and it start to spread

Niels

Hello abcd0_12340

I suggest that you do this:

Reboot your pc into safe mode by rebooting your pc and press several times on the F8 button before the windows loading screen select safe mode press enter. Log in with your account. Go to start,run,type regedit press enter. Expand hkey_local_machine,and following folders and subfolders: software,microsoft,windows,currentversion,run delete only these entries which you will find at the righ side:

# MS32DLL = "%Windows%\.MS32DLL.dll.vbs"

# winboot = "wscript.exe %Windows%\boot.ini

Go now to hkey_current_user,software,microsoft,windows,currentversion,policies,explorer

and search for the entry NoDriveTypeAutoRun = "0" You will find it at the right side. Rightclick on it and choose modify change the value to 0x91 (this is for windows xp). Reboot your computer and perform another BitDefender scan. It could be that you have to empty system restore once again.

Best regards

Niels