Win32:warezov_qu

General Topics
21

When you say it keeps coming up each time please restate the file name and location even if the same and also what were you doing when it returned ?

You could try DrWeb CureIT! http://download.drweb.com/drweb+cureit/

Have you tried a forum search as suggested
http://forum.avast.com/index.php?topic=24400.0
http://www3.ca.com/be/securityadvisor/virusinfo/virus.aspx?id=58375

Also useful as a diagnostic tool - Download HiJackThis.zip - HJT Information HiJackThis Tutorial 1 or HiJackThis Tutorial 2 or HiJackThis Tutorial 3
On-line analysis - HiJackThis Log file - On-line Analysis OR HiJackThis Log file - On-line Analysis 2
Ignore any 023 reference to avast processes, this is a hiccup in the HJT 1.99.1 (especially missing file entry for avast), if you need any help with any of the analysis let us know.

22

Thanks, I will try all you sugest. Well, the Alarm goes off, and it says it has found a Virus, in these two files.
9/12/2006 6:57:42 AM 1165607862 SYSTEM 1960 Sign of “Win32:Warezov-QV [Wrm]” has been found in “C:\WINDOWS\system32\alrsbatt.dll” file.
9/12/2006 6:57:48 AM 1165607868 SYSTEM 1960 Sign of “Win32:Warezov-QU [Wrm]” has been found in “C:\WINDOWS\system32\strmwin8.dll” file.
The Alarm goes off regulary, throughout the Day. Always twice. and puts them in the same files. I just put them in the chest.

23

Were you browsing or just working on the system ?
If browsing something is downloading and installing those files and the firewall isn’t stopping this.

Check out CureIt and the other links, that doesn’t work, you really need to download HJT and read the Tutorials and post (paste) the contents of the hijackthis.log file here.

24

Hi Dr Web cure it fixed it up, it did a quick scan and said to “Reboot” it would then fix the three files it found. Thanks no Worms for two Days now.

25

Thanks for the feed back, glad that it is now sorted.