Antivirus Soft Virus PART 2

View previous topic View next topic Go down

Antivirus Soft Virus PART 2

Post by mrgrey26 on 15th February 2010, 1:36 am

I read the other posts... they didnt help, my file is named something different... I can't open ANY programs except firefox and iceSword, yes I already tried MBAM it wont even come close to opening. The logs are below (i had to open the txt file and copy the text within a second before it closing automatically).



Process:

System Idle Process
System
C:\WINDOWS\system32\WLTRYSVC.EXE
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\BCMWLTRY.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Logitech\LVMVFM\LVPrcSrv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\system32\alg.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Documents and Settings\Andrew\Local Settings\Application Data\idqldh\xujjsftav.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
C:\Documents and Settings\Andrew\Desktop\New Folder\IceSword122en\IceSword.exe
C:\WINDOWS\system32\svchost.exe



Startup:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
wmwhpdgo
C:\Documents and Settings\Andrew\Local Settings\Application Data\idqldh\xujjsftav.exe

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
MSMSGS
"C:\Program Files\Messenger\msmsgs.exe" /background

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
wmwhpdgo
C:\Documents and Settings\Andrew\Local Settings\Application Data\idqldh\xujjsftav.exe

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
desktop.ini


C:\Documents and Settings\All Users\Start Menu\Programs\Startup
HP Digital Imaging Monitor.lnk
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Remark£º)

mrgrey26
Novice
Novice

Posts Posts : 5
Joined Joined : 2010-02-15
OS OS : windows xp
Points Points : 24951
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Antivirus Soft Virus PART 2

Post by mrgrey26 on 15th February 2010, 3:03 am

no one has advice?

mrgrey26
Novice
Novice

Posts Posts : 5
Joined Joined : 2010-02-15
OS OS : windows xp
Points Points : 24951
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Antivirus Soft Virus PART 2

Post by Belahzur on 15th February 2010, 11:24 pm

Hello.

  • Open IceSword again.
  • Go into the Process list again, and right click on the following filename:

    xujjsftav.exe

  • Select Terminate Process.
  • Close IceSword.

Please download and run this tool.

Download Malwarebytes' Anti-Malware from [You must be registered and logged in to see this link.]

Double Click mbam-setup.exe to install the application.

  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Note:
If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts.
Click OK to either and let MBAM proceed with the disinfection process.
If asked to restart the computer, please do so immediately.


Post the contents of the MBAM Log.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245111
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Antivirus Soft Virus PART 2

Post by mrgrey26 on 15th February 2010, 11:40 pm

thank you... i got it

mrgrey26
Novice
Novice

Posts Posts : 5
Joined Joined : 2010-02-15
OS OS : windows xp
Points Points : 24951
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Antivirus Soft Virus PART 2

Post by Belahzur on 16th February 2010, 9:42 pm

Please post the MBAM log.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245111
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Antivirus Soft Virus PART 2

Post by mrgrey26 on 16th February 2010, 11:22 pm

i didnt use mbam... i just did a system restore.

mrgrey26
Novice
Novice

Posts Posts : 5
Joined Joined : 2010-02-15
OS OS : windows xp
Points Points : 24951
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Antivirus Soft Virus PART 2

Post by Belahzur on 17th February 2010, 9:13 pm

Ah, okay.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245111
# Likes # Likes : 1

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum