Viruses in system32 folder

Lisandro · 2007-04-17T22:53:32.000Z

Steven6767 post:66:

Am I clean now?

Most probably.
Do you have some time for full computer on-line scanning?

Kaspersky
Trendmicro housecall
Ewido
F-Secure
Panda ActiveScan
BitDefender (free removal of the malware)
HitmanPro (new online scanner)

I suggest the first one…

system · 2007-04-18T00:36:15.000Z

Steven6767 post:66:

Ok, I did everything you asked …

But have you updated your Service Pack?

You were deeply infected and we just spent 4 days of dedicted work to get you to this point. You really don’t want to do this all again …

Here’s a link to SP1a

http://www.microsoft.com/windowsxp/downloads/updates/sp1/default.mspx

and SP2

http://www.microsoft.com/windowsxp/downloads/updates/sp1/default.mspx

Update the Service Pack and get all the security patches or we’ll be spending a lot more time together

And Tech’s suggestion is a good verification.

system · 2007-04-18T02:32:24.000Z

Haha yea, the sp’s are free to update right?

system · 2007-04-18T02:38:54.000Z

I went to install the service pack 1a and it says my product key is invalid? I don’t want to get to technical with this like call them up and everything to get a new product key. Is there any way to get a quick fix, without a valid key?

system · 2007-04-18T02:39:32.000Z

Yep - they’re free.

But before you do that, will you do me one favor? I would like to check one more thing.

Please download VundoFix.exe to your desktop.

Double-click VundoFix.exe to run it.
When VundoFix re-opens, click the Scan for Vundo button.
Once it’s done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will reboot your computer, click OK.

Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above instructions starting from “Click the
Scan for Vundo button.” when VundoFix appears at reboot.

A log will be produced which you can post in your next response.

system · 2007-04-18T02:41:20.000Z

Steven6767 post:70:

I went to install the service pack 1a and it says my product key is invalid? I don’t want to get to technical with this like call them up and everything to get a new product key. Is there any way to get a quick fix, without a valid key?

I don’t know of a way around this. If the key is valid contacting them shouldn’t be a problem. If not, well …

Lisandro · 2007-04-18T02:42:41.000Z

Steven6767 post:69:

Haha yea, the sp’s are free to update right?

If your Windows copy is legit… yes you can apply them… without it, you won’t be able…

system · 2007-04-18T02:43:25.000Z

Ok, i’ll do the vundofix in a second. I guess I could try to e-mail them, or I could just get SP2 from one of my friends.

system · 2007-04-18T02:45:25.000Z

Ill run VFix now and i’ll be back on in a minute ;D

Lisandro · 2007-04-18T02:46:06.000Z

Steven6767 post:74:

I could just get SP2 from one of my friends.

You’ll need a legit key again… or to crack your system (or installation CD).

system · 2007-04-18T02:54:00.000Z

I ran vundo but no files came up. Is that bad or good?

system · 2007-04-18T02:56:09.000Z

That’s very good

Polonus asked about a fresh hjt log and Tech an online scan. If you’re not completely fed up with us …

Well, if you tell me your computer is running better and the firewall isn’t driving you crazy with connection attempts I’m good with that.

system · 2007-04-18T02:58:18.000Z

Haha, ok well im gonna go then, i’ll keep trying to get SP2, hopefully i’ll get it soon. But for now i’ll keep my computer on lockdown

system · 2007-04-18T02:59:33.000Z

Sorry - edited in a little extra above.

Is the computer running well now? And the firewall is at peace?

system · 2007-04-18T03:03:41.000Z

Yea the firewalla is doing fine I guess, for games online games its a pain in the butt, but it’s fine once I let them through. Yea, I’ll get the Hjt log, and the online scan done tommorow, i’ll reply with the results. Thanks for all the help, I think my computer would have crashed by now if it wasn’t for you haha.

system · 2007-04-18T03:06:02.000Z

You’re welcome.

I’ll take a look at your log tomorow but I think your just fine now.

system · 2007-04-18T03:06:16.000Z

My computer I think is running a lot better, especially without all those annoying virus popups every 5 seconds.

system · 2007-04-18T03:07:13.000Z

Ok i’ll talk to you later.

system · 2007-04-18T03:07:20.000Z

Steven6767 post:83:

My computer I think is running a lot better, especially without all those annoying virus popups every 5 seconds.

You didn’t like those?

system · 2007-04-19T21:14:31.000Z

Sorry for not replying, I’ll get everything done tonight (hopefully) so we can be done with this , unless my brother steals the computer for a while.

Announcements