Need help with msvmiode.exe virus

Viruses and worms
1

Hi --especially to essexboy :smiley:

I don’t know where I got this virus from but I need some help in removing this.

This is the 1st time that my computer’s been infected and I’m in a panic mode.

I followed Essexboy’s instruction to run MBAM and OTL.

USB Disk Security still detects the msvmiode… I’m getting desperate!!! lol!

Attached are my logs…

2

Hi shanishy,
For info, Essexboy is away for a few days, there may be others here with the knowledge to help you out, I’m not really one of them. (Sorry).

The alternatives are to either wait, or register at another forum that specializes in this sort of thing. Geekstogo, MajorGeeks, Aumha, Mybleepingcomputer, are some that come to mind.

3

hello, MSVMIODE.EXE(Trojan.Agent/Gen) can be removed by SuperAntiSpyware,good luck http://www.superantispyware.com/download.html

4

sorry for double post i forgot to say,start windows in safe mode and run a full scan with superantispyware

5

1.clear your temp files:http://www.piriform.com/ccleaner
2.do a dr.web cure it scan:http://www.freedrweb.com/cureit/?lng=en
3.scan your system for rootkits:http://www.usec.at/rootkit.html
4.scan with mbam:http://www.malwarebytes.org/mbam.php
5.post a Hijack Hunter log in this topic:http://www.novirusthanks.org/products/hijack-hunter/
6.we will provide a cleaning script,you should run it with Threat Killer

Using Hijack Hunter:
1.after downloading install the program
2.from the gui press scan
3.post the log here or attach it
4.the restorer page contain helpful resources to fix policies related

6

Thank you Left123. Will try your advice. :smiley: Hope this works.

7

Thanks for the FYI Tarq57!

8

It appears you have a bunch of nasties.

[2010/07/26 10:18:12 | 000,120,320 | ---- | C] () -- C:\WINDOWS\System32\61.exe [2010/07/26 09:17:23 | 000,120,320 | ---- | C] () -- C:\WINDOWS\System32\22.exe [2010/07/26 08:58:47 | 000,120,320 | ---- | C] () -- C:\WINDOWS\System32\57.exe [2010/07/26 02:02:12 | 000,120,320 | ---- | C] () -- C:\WINDOWS\System32\15.exe [2010/07/26 01:40:27 | 000,120,320 | ---- | C] () -- C:\WINDOWS\System32\06.exe [2010/07/26 01:31:06 | 000,120,320 | ---- | C] () -- C:\WINDOWS\System32\12.exe [2010/07/26 01:13:02 | 000,120,320 | ---- | C] () -- C:\WINDOWS\System32\73.exe [2010/07/26 01:06:00 | 000,120,320 | ---- | C] () -- C:\WINDOWS\System32\42.exe

Please update and run MBAM again.