How to fix htm/html file that infected by VB Dropper (HTML/Drop.Agent.AB) malware. To check htm/html file infected by VB Dropper malware just take a look at a buttom of your htm/html file. If you see code like below:
//SCRIPT Language = VBScript DropFileName = "svchost.exe" ........
Set WSHshell = CreateObject("WScript.Shell")
WSHshell.Run DropPath, 0
That's mean you have infected by ramnit. You can try this removal tool VB Dropper Malware Remover link How to use that:
- Install Java on your PC
- Download that link above
- Create a new directory on [Downloaded-path]/lib
- download http://groups.google.com/group/formyblogger/web/swing-layout-1.0.4.jar and http://groups.google.com/group/formyblogger/web/groovy-all.jar. Save them to[downloadedPath]lib. Don't change the file's name. Or, you can also just download this zip file and extract it to your [downloadedPath].
java -jar [downloadedPath]VBSDropperRemover.jar