hi,
my pc was infected by prorat last week and today i kill it!!
it's simple..
Download DelLater.
Unzip dellater.exe into C:\Windows or into desktop
Copy and paste the following text into notepad and save as "del.bat" on your desktop.
Code:
dellater.exe C:\Windows\services.exe
dellater.exe C:\windows\system\sservice.exe
dellater.exe C:\windows\system32\winkey.dll
dellater.exe C:\WINDOWS\system32\fservice.exe
dellater.exe C:\windows\system32\wininv.dll
Copy and paste the following text into notepad and save as "fix.reg" on your desktop.
Code:
Windows Registry Editor Version 5.00
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5Y99AE78-58TT-11dW-BE53-Y67078979Y}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"Shell"="Explorer.exe"
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run]
Doubleclick the del.bat file. You will get a notification for every file marked for deletion. Click OK
Reboot.
If you get error messages about files missing on restart, that is a good sign.
Doubleclick the fix.reg file. Confirm that you want to merge the information into the registry.
After you can use Norton Antivirus to delete the other files.
Bye
you can download DelLater here:
http://www.diamondcs.com.au/index.php?page=dellater