Solved "Your PC Protector" Infection

It has been pointed out to me that there may still be a couple of problem files on your pc, so can you please do the following;

• Download Avenger by Swandog and unzip it to your Desktop.
  
  Note: This program must be run from an account with Administrator privileges.
  
  
• Open the Avenger folder and double click Avenger.exe to launch the programme.
• Copy the text in the code box below and Paste it into the Input script here: box.

Code:

Files to delete:
c:\windows\SYSTEM32\demibigi.dll
c:\windows\SYSTEM32\zekuboli.dll

• Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.
  
  
• Ensure the following:
  • Scan for Rootkits is checked.
  • Automatically disable any rootkits found is Unchecked.
• Press the Execute key.
• Avenger will now process the script you've pasted (this may involve more than one re-boot), when finished it will produce a log file.
• Post the log back here please. (it can also be found at C:\avenger.txt)

 

Crunchie,

Your persistence and thoroughness are amazing. Should I uninstall Avenger?

Here is the log:

Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!


Error: file "c:\windows\SYSTEM32\demibigi.dll" not found!
Deletion of file "c:\windows\SYSTEM32\demibigi.dll" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Error: file "c:\windows\SYSTEM32\zekuboli.dll" not found!
Deletion of file "c:\windows\SYSTEM32\zekuboli.dll" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist


Completed script processing.

*******************

Finished! Terminate.

 

Just as I thought. They did not exist .
Yes please, just remove Avenger and you are free to go again .