I checked the result of the cleaning tool (CS_DevEvil.zip). The virus is completely gone and even the hosts file was fixed.

Another thing, it's easy to see if the virus is still active on a PC by running Ad-Aware and then looking in the log file. If it's still active you will find some lines similar to this in the running processes list:

#:31 [winlogon.exe]
FilePath : C:\Documents and Settings\1\Local Settings\Application Data\
ProcessID : 3992
ThreadCreationTime : 1-25-2006 4:29:06 AM
BasePriority : Normal
FileVersion : 1.00.0004
ProductVersion : 1.00.0004
ProductName : Brontok.A
InternalName : Brontok.A
OriginalFilename : Brontok.A.HVM31

This topic has been dead for over six months. Start a new discussion instead.
Have something to contribute to this discussion? Please be thoughtful, detailed and courteous, and be sure to adhere to our posting rules.