Need Help In Removal Of Vbs.pica.e@mm
I am using BD anitvirus plus v10. I used it to scan for the location of the viruses as the 'virus alert' window keeps poping up. The results were that it can be found in the System Volume Information [autorun.inf=>(unicode) and ms32.dll.vbs=>(unicode)] and cant be disinfected and moved. All my HDD and thumbdrives have been affected. What is this and why is this happening? Is there any solution?
Comments
-
The given files are located in the System Restore subdirectory, where Windows prevents them from being deleted. You should disable and the re-enable System Restore to get rid of the specific files. You can do this by going to the Control Panel -> System -> System Restore, checking "Turn off System Restore for all drives", then clicking apply, after which uncheck it and click apply again.
0 -
The given files are located in the System Restore subdirectory, where Windows prevents them from being deleted. You should disable and the re-enable System Restore to get rid of the specific files. You can do this by going to the Control Panel -> System -> System Restore, checking "Turn off System Restore for all drives", then clicking apply, after which uncheck it and click apply again.
tried what you told me to do so. but it didnt work.0 -
tried what you told me to do so. but it didnt work.
Try to repeat the steps, but disable BD realtime protection before doing so.
After you disable/re-enable System Restore, re-enable BD realtime protection and scan your system to see if the infections were removed.
Cris.0 -
Try to repeat the steps, but disable BD realtime protection before doing so.
After you disable/re-enable System Restore, re-enable BD realtime protection and scan your system to see if the infections were removed.
Cris.
It really didn't work. I still receive alerts like this:
0 -
Hello abcd0_12340,
As a last resort, try following the steps described here to delete the infected file:
http://forum.bitdefender.com/index.php?showtopic=1054
Cris.0 -
Hello abcd0_12340,
As a last resort, try following the steps described here to delete the infected file:
http://forum.bitdefender.com/index.php?showtopic=1054
Cris.
tried and the file wad able to be deleted but when i log in, the file appears again. and it start to spread0 -
Hello abcd0_12340
I suggest that you do this:
Reboot your pc into safe mode by rebooting your pc and press several times on the F8 button before the windows loading screen select safe mode press enter. Log in with your account. Go to start,run,type regedit press enter. Expand hkey_local_machine,and following folders and subfolders: software,microsoft,windows,currentversion,run delete only these entries which you will find at the righ side:
# MS32DLL = "%Windows%\.MS32DLL.dll.vbs"
# winboot = "wscript.exe %Windows%\boot.ini
Go now to hkey_current_user,software,microsoft,windows,currentversion,policies,explorer
and search for the entry NoDriveTypeAutoRun = "0" You will find it at the right side. Rightclick on it and choose modify change the value to 0x91 (this is for windows xp). Reboot your computer and perform another BitDefender scan. It could be that you have to empty system restore once again.
Best regards
Niels0
