View Single Post
Old 12-09-2008, 11:23 PM   #6 (permalink)
Angelfire777
Moderator/Analyst, Security Team ; Rangemaster, TSF Academy
 
Angelfire777's Avatar
 
Join Date: Oct 2006
Posts: 4,581
OS: Vista


Re: Need help removing Sinowal.Trojan

Hi,

That's okay, the nasty was deleted fine.


*Open the Symantec Control Panel
Click View | Quarantine.
Select the file or group of files.
Do one of the following:
  • *Right click the file and choose Delete Permanently
    *Click the X Delete button.
Click Start Delete


Open notepad.
Copy and paste the text inside the Code Box below into Notepad
Choose File > Save As and under "Save as type", choose "All Files".
Type clean.bat in the File name and save it to your desktop.

Code:
@echo off 
if exist "%temp%\log.txt" del "%temp%\log.txt"

for %%g in ( 
"C:\Documents and Settings\Owner\My Documents\Aptiva Files\Backups\SAP Labs Backups\2001-05-25\Users 05-25-01.zip"
"K:\My Backups\Bond Backup\Program Files\Internet Explorer\PLUGINS\nponflow.dll"
) do ( 
del /a/f/q %%g 
if exist %%g echo.%%g >>"%temp%\log.txt" 
)>nul 2>&1 

for %%g in ( 
"K:\My Backups\Bond Backup\Program Files\onflow"
) do ( 
attrib -s -h -r %%g 
rd /s/q %%g 
if exist %%g echo.%%g >>"%temp%\log.txt" 
)>nul 2>&1 

if exist "%temp%\log.txt" (start notepad "%temp%\log.txt" 
) else echo.Deleted Successfully! 
echo. 
pause 
del %0
Locate clean.bat on your Desktop and double-click on it. Tell me what it says.

let me know how's your computer running.
__________________
UNITE and ASAP since 2006


If we have helped you, please consider donating.

The past won't be able to hurt you unless you keep on looking back at it.

Last edited by Angelfire777; 12-09-2008 at 11:24 PM.
Angelfire777 is offline