Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

My computer is so infected

This is the place for general discussions - we are a family site - no bad language, no flames.
A Moderators word is final.

My computer is so infected

Unread postby xanor » May 30th, 2010, 2:13 pm

My computer is so infected... Today i scanned it with Advanced system protector from systweak and it detected these malwares...

win antivirus pro 2006 registry keys
rogue program ms antispyware 2009 registry keys
worm.viking registry keys and files
trojan.patched.hv files and folders

Here are some results of the files that i uploaded to virustotal to check if any other program detects the viruses...

This was not detected at least system protector detected it as trojan.patched http://www.virustotal.com/analisis/d3b69a8b59e07e775f99871c4ad107a4f72f392325695e7f261f6aa6e590d4e6-1275241817

This here was not detected http://www.virustotal.com/analisis/d3b69a8b59e07e775f99871c4ad107a4f72f392325695e7f261f6aa6e590d4e6-1275241998

The worm.viking was not detected http://www.virustotal.com/analisis/bf8e7a04cfc79fcedf23b652b9468b8a719a035e72bd4a3495b12524825ac371-1275242171

I also have these hidden registry keys that antivir detects:

Windows Registry Editor Version 5.00

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"ParseAutoexec"="1"
"ExcludeProfileDirs"="Local Settings;Temporary Internet Files;History;Temp"
"BuildNumber"=dword:00000a28

HKEY_USERS\S-1-5-21-436374069-1123561945-682003330-500\Software\Microsoft\Windows\CurrentVersion\MSXmlSl\node_moxhzyfpejfmhmaosabewevrisubqbzvnzjpiphobhbdykejfmoiw
[NOTE] The registry entry is invisible.
HKEY_USERS\S-1-5-21-436374069-1123561945-682003330-500\Software\Microsoft\Windows\CurrentVersion\MSXmlSl\node_mddhrhzpejfmhmaosabewevrisubqbzvnzjpiphobhbdykejfmoiw
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet003\Services\NtmsSvc\Config\Standalone\drivelist
[NOTE] The registry entry is invisible.
xanor
Active Member
 
Posts: 2
Joined: May 30th, 2010, 1:40 pm
Advertisement
Register to Remove

Re: My computer is so infected

Unread postby melboy » May 30th, 2010, 5:54 pm

Hi

If you think you are infected you need to read >>this<< and start a new topic >>here<<

Then post the required logs and a description of your problems.
User avatar
melboy
MRU Expert
MRU Expert
 
Posts: 3670
Joined: July 25th, 2008, 4:25 pm
Location: UK


Return to General Discussions



Who is online

Users browsing this forum: No registered users and 54 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware