Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

TARGETED pop ups

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Unread postby Scotty » August 15th, 2007, 2:08 pm

Hello beljar2

Firstly, let me apologise for the delay in replying. My email system is a mess and the only way to rectify it is to change ISP, which I cant do as Im under contract. :roll:

Could you navigate to these files

C:\WINNT\system32\XDva014.sys
C:\WINNT\system32\XDva016.sys

When you locate them right-click and select Properties on each. Make a note of the information you find there and post it in your next reply.

Upload a File to Virustotal
Please visit Virustotal

  • Click the Browse... button
  • Navigate to the file C:\WINNT\system32\XDva014.sys
  • Click the Open button
  • Click the Send button
  • Copy and paste the results back here please.


Do the same for this file.

C:\WINNT\system32\XDva016.sys
User avatar
Scotty
Retired Graduate
 
Posts: 4138
Joined: August 4th, 2006, 5:31 am
Location: Haggistown, Kiltland
Advertisement
Register to Remove

Unread postby beljar2 » August 18th, 2007, 11:21 pm

Sorry it took me awhile to notice that there is a page 2. That and I have been packing. I don't see
C:\WINNT\system32\XDva014.sys or
C:\WINNT\system32\XDva016.sys in system32
is there a different set of instructions I should follow before I download
download Virustotal.
beljar2
Regular Member
 
Posts: 17
Joined: June 22nd, 2007, 9:06 pm

Unread postby Scotty » August 19th, 2007, 5:12 pm

Hi blejar2

Try looking for those files again, but firstly follow these instructions.
    * Open My Computer.
    * Select the Tools menu and click Folder Options.
    * Select the View tab.
    * Under the Hidden files and folders heading select Show hidden files and folders.
    * Uncheck the Hide protected operating system files (recommended) option.
    * Click Yes to confirm.
    * Click OK.
User avatar
Scotty
Retired Graduate
 
Posts: 4138
Joined: August 4th, 2006, 5:31 am
Location: Haggistown, Kiltland

Unread postby beljar2 » August 21st, 2007, 10:23 pm

I still dont see any files buy those names. Are you sure they are on my computer. They might not be there.
beljar2
Regular Member
 
Posts: 17
Joined: June 22nd, 2007, 9:06 pm

Unread postby Scotty » August 22nd, 2007, 5:48 pm

Hi beljar2

Lets try it this way.

Now we need to do a search.
Start > Search > For Files and Folders.
Expand Search Options, check Advanced Options, check Search system folders, Search hidden files and folders, and Search Subfolders.
Paste this into the Search for files and folders named box:

XDva


Let me know if anything comes up, and write down their full paths,
example: C:\WINNT\system32\XDva016.sys
User avatar
Scotty
Retired Graduate
 
Posts: 4138
Joined: August 4th, 2006, 5:31 am
Location: Haggistown, Kiltland

Unread postby beljar2 » August 22nd, 2007, 6:07 pm

Still nothing. Did not see searsh for hidden files but it shows them already.
beljar2
Regular Member
 
Posts: 17
Joined: June 22nd, 2007, 9:06 pm

Unread postby Scotty » August 22nd, 2007, 7:05 pm

By default, Windows will not search in Hidden files/folders, even though they have been "unhidden".

When you click on Search> All Files/Folders the left pane now has the box to for the searching. Scroll down a little and you will see More Advanced Options.
Click on the arrow beside it and it will expand. Put a check in the box next to Search Hidden Files/Folders
User avatar
Scotty
Retired Graduate
 
Posts: 4138
Joined: August 4th, 2006, 5:31 am
Location: Haggistown, Kiltland

Unread postby Scotty » August 29th, 2007, 4:38 am

Still needing help here?
User avatar
Scotty
Retired Graduate
 
Posts: 4138
Joined: August 4th, 2006, 5:31 am
Location: Haggistown, Kiltland

Unread postby NonSuch » September 1st, 2007, 3:35 pm

This topic is now closed due to inactivity. If you wish it to be reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

If it has been 10 days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, this topic will not be reopened. If you still require help, please start a new topic and include a fresh HijackThis log and a link to this thread in your new topic.

You can help support this site from this link :
Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
User avatar
NonSuch
Administrator
Administrator
 
Posts: 28747
Joined: February 23rd, 2005, 7:08 am
Location: California
Advertisement
Register to Remove

Previous

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 288 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware