i hve tried a few things and cant get rid of this virus i hve tried a few scanners and they all hve diff names for it or them im not really sure but i got a hijackthis log file and would be greatful for some help thanks
Logfile of HijackThis v1.99.1
Scan saved at 6:34:54 PM, on 26/07/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
can you relate some of the problems you are having .
can you tell us what scans you have done and who detected what and where it was located?
these are important questions . scan again if you forgot or ignored the responses.
i hve tried a few things and cant get rid of this virus
What have you tried ?
What virus ?
How was it detected, what detected it or what makes you think/suspect you have a virus, symptoms, etc. The more information you can give us the better.
O4 - Global Startup: MSCOMM32.EXE is listed as unknown, what do you know about it
A google search for this indicates a trojan backdoor (MSCOMM32.EXE is Trojan/Backdoor BBQ, AKA TROJ SMALL.BBQ) and considering you don’t appear to have an active firewall present you will be fighting an uphill battle to get clean. So you should tick fix in HJT.
HijackThis logs are best analyzed by Experts on
antiSPYWARE forums; however, since you do not appear
to have an antispyware program ( Ewido is antiTROJAN ),
I recommend the Experts at www.landzdown.com .
By the way, your Sun Java program is 4 Updates behind;
therefore, it is a serious security risk . It should be
uninstalled, then go to www.java.com & get their latest .
Yawn, sending Paul to landzdown isn’t going to answer the questions we have asked to try and help him also, what questions or advice have we offered Paul that is sooooo wrong.
That removal link isn’t a removal tool but an invitation to buy RegRun. I don’t like that tactic, give the person a headache (tell them whats wrong) and then sell them an asprin.
thanks for ur help every1 so far the infected file is C:\windows\system32\iedld.dll says it is infected with trojan.gen (other) this is using avast
some of the symptoms r the computer doesnt like to open a lot of programs it just crashes freezes up a bit is pretty slow now to
um i hve tried just bout every free malware removal program i can find used some of the online scanners they found this virus and others but cannot remember the names of the viruses
i ran another scan with hijackthis and i cannot find mscomm32.exe ne more
try running a boot time scan . check your help files for how .
move anything detected to chest , post back if you have any problems.
have you tried digging down to system32 file and deleting the dll file manually?
you can scan the file with multiple scanners to get a broader opinion at http://virusscan.jotti.org/ good luck
hve run boot scan a few times and keep either deleting or moving to the chest but still comes back cannot find the file to delete it manually
the avast msg is “The AAVM subsystem detected a RPC error.”
as u can prob tell im not that cluey bout this sort of stuff so what ever u reccomend to do try dumb it down a bit so i can understand thanks for ur help
It should be enough using the boot time scanner.
Anyway, if a virus is replicant (coming and coming again), you should, besides scheduling a boot time scanning with avast,
i am not the administrator on the comp but when i run disk clean up does it clean every1s temp files or just mine if so how do i clean them and where do i find a-squared thanks
Dangerous MSCOMM32.EXE - Dangerous
mscomm32.exe
MSCOMM32.EXE is Trojan/Backdoor BBQ.
Kill the process MSCOMM32.EXE and remove MSCOMM32.EXE from Windows startup using RegRun Reanimator.
So there is virtually no information and is really trying to get you to buy RegRun to resolve the problem.
hey guys i got rid of the trojan thanks every1 for ur help but now im hvin other issues i tried to update java as some1 said but it said the computer is runnin in safe mode when i had to download activex components i hve also had the same error tryin to update windows i got an error code and had a look round and it also said the computer is runnin in safe mode and avast still wont work am gettin the same error msg
scanning with ewido now says i am infected wih downloader.small.cjv in these files
c:\w.exe
c:\windows\lb.exe
and also infected with backdoor.shbot.b in these files
c:\windows\system\svchostw.exe
c:\windows\system\svchostw.dll
c:\windows\system\svchctrl.exe
c:\windows\system\regserv.exe
c:\windows\system\regserv.dll
what do i do with these files can i just delete them i removed some of the last ones from startup with hijackthis thanks guys
Hi Paul :