Malware Removal Forums

Can't get rid of this virus,need help

rustyknife · 2007-12-16T18:17:41+00:00

I just did a full system virus scan with norton and it said that a downloader was partially fixed, this is when I knew bad things were happening, I used The Ultimate Troubleshooter to check for any new startup programs and currently running processes and I found three new things. I can't find any info on the internet about them so I guess they are new: sis32, shovth, and webroot. I deleted the processes and startup entries but it keeps coming back. I think it infected a bunch of programs that I use because any program that I try and use doesnt work and it starts the sis32, webroot, and shovth back up again and I know the program was affected because its icon has changed. Spybot didn't do anything, norton didn't do anything. here's the hijackthis log. EDIT: I wiped my hard drive and I saved some files to a flash drive but I just found out that those files were infected and now my newly wiped drive is now back in hell agh I put up a new hijackthis log Logfile of Trend Micro HijackThis v2

10 min read

✨ The volunteers who helped with this thread aren't active anymore, but you can still get a personalized answer — click Ask AI below.

rustyknife

December 27, 2007, 5:51 PM UTC

I checked my settings and the firewall is turned on

Katana MRU Teacher Emeritus

December 27, 2007, 5:58 PM UTC

silver

January 4, 2008, 12:57 AM UTC

This topic is now closed. If you wish it reopened, please send an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used.
If the user name does not match the one in the thread linked, the email will be deleted.

✨ Ask AI about this thread

No ads, no affiliate links — generated on request from this thread's own archived content, not written by forum staff. Never run a scan/removal tool as a self-service step if the original thread describes it being done under a helper's direct supervision, and don't include your name, email, or other personal details in a follow-up question. See our privacy page for details on how this works.