1 Virus Inected Files (page 2) — malwareremoval.com Archive

Swanny · 2007-11-12T18:46:02+00:00

ve eenhaving probs lately my desktop and my sons Laptop. Ive done a scanwith Kasper and it found a virus and some infected files ..Here is the log .any help appreciated.. Logfile of HijackThis v1.99.1 Scan saved at 18:45:06, on 12/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\a-squared Anti-Malware\a2service.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\PROGRA~1\Grisoft\AVG7\avgemc.exe C:\WINDOWS\System32\nvsvc32.exe C:\PROGRA~1\SPYWAR~1\sp_rsser.exe C:\WINDOWS\System32\PAStiSvc.exe C:\WINDOWS\System32\svchost.exe C:\W

Katana MRU Teacher Emeritus

November 18, 2007, 1:08 PM UTC

That's fine

If the Qoobox folder is gone then Combofix is uninstalled
You can delete that .txt file

You are good to go :cheers:

Stay safe
K'

Swanny

November 18, 2007, 1:55 PM UTC

Thanks Very Much Katana

So your saying my Pc is ok now?

If so thanks for all the help .i will try do me sons Laptop now..hehe as u said in other post his is a lot more dangerous than this.

Cheeers .
Swanny.

Katana MRU Teacher Emeritus

November 18, 2007, 1:59 PM UTC

"Swanny" wrote:So your saying my Pc is ok now?.

Yes

Swanny

November 18, 2007, 5:03 PM UTC

Thanks Katana. A A squred scan an found this. dont know if its any importance. Took ages... i quarenntined .them,dont know if i did right tho ?

a-squared Anti-Malware - Version 3.0
Last update: 18/11/2007 10:05:09

Scan settings:

Objects: Memory, Traces, Cookies, C:\
Scan archives: On
Heuristics: On
ADS Scan: On

Scan start: 18/11/2007 14:14:25

C:\Documents and Settings\[redacted]\Desktop\SDFix.exe/Process.exe detected: Riskware.RiskTool.Win32.Processor.20
C:\SDFix\apps\Process.exe detected: Riskware.RiskTool.Win32.Processor.20

Scanned

Files: 62102
Traces: 338752
Cookies: 22
Processes: 31

Found

Files: 2
Traces: 0
Cookies: 0
Processes: 0
Registry keys: 0

Scan end: 18/11/2007 16:10:00
Scan time: 01:55:35

C:\Documents and Settings\keith\Desktop\SDFix.exe/Process.exe Quarantined Riskware.RiskTool.Win32.Processor.20
C:\SDFix\apps\Process.exe Quarantined Riskware.RiskTool.Win32.Processor.20

Quarantined

Files: 2
Traces: 0
Cookies: 0

Katana MRU Teacher Emeritus

November 18, 2007, 6:11 PM UTC

They are just false positives because of the methods that SDFix has to use to remove malware.

You can delete SDFix.exe as you don't need it,

Swanny

November 19, 2007, 11:34 AM UTC

Thankyou Very Much Katana ,for all the Help..

Gary R Administrator

November 23, 2007, 4:12 PM UTC

This topic is now closed.

If you are the originator of this topic, and you need it re-opened please send an email to 'admin at malwareremoval.com', including a link to this topic.

If you have been helped and wish to donate to help with the costs of this volunteer site, please read Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.

Gary R