Followed the 15 step and here's the log

[xyz_cityhunter]

I got some virus over the Windows Life Messenger which i got from opening a ZIP pic. As a result, my messenger are also sending out messeges with the same virus. I've done the 15 steps provided in the Viruses/Spyware/Malware, preliminary removal instructions Thread but since it's not always infecting the messenger system so i cannot determine that those 15 steps have fixed it or not. Hoping that i posting the Log file here and someone with more experience can tell me that my PC is clean or what to do next...

Pls note that i cannot find the AVGAntispyware.txt and so i copy and paste it on a notepad...

 

[xyz_cityhunter]

Okay... the virus strikes again, sending random msg to my contact on msger...
The 15 steps i took didn't get it...
What should i do now?

 

[howard_hopkinso]

Hello and welcome to Techspot.

Delete all files in AVG Antispyware quarantine. Empty your recycle bin.

Open notepad and copy/paste the text in the code box below into it:
NOTE* make sure to only highlight and copy what is inside the quote box nothing out side of it.
Also ..

Pay particular attention to this :-

Make sure the word File:: is on the first line of the text file you save (no blank line above it, & no space in front of it)
Code:

File::
C:\WINDOWS\system32\nvbsvc.exe

Folder::
C:\VundoFix Backups
C:\Qoobox

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Volume Shadow Organizer"=-

Save this as CFScript.txt

Then drag the CFScript.txt into ComboFix.exe as you see in the screenshot below.

This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply together with a fresh HJT log.

let me know if you`re having any problems.

Regards Howard :wave: :wave:

This thread is for the use of xyz_cityhunter only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[xyz_cityhunter]

I've mess up a bit... I run the ComboFix 1st, which later i realise that i suppost to delete the all the stuff in AVG Antispyware. And so i deleted everything in the AVG Antispyware and i run the ComboFix again for the second time...
Hope that won't cause any trouble later. And i realise that a error pop-up of sed.cfexe saying it needs to be shut down and asking whether i'm sending the error report or not...
So, here's the new Log... Will post again if got any problem again...

 

[howard_hopkinso]

No, that`s ok, it didn`t matter.

Your log files are clean.

Turn off system restore.(XP/ME only) See how HERE.

Now, turn system restore back on. This will have deleted all your old restore points and any nasties that are in them. It will also have created a new, clean restore point.


If you have any further virus/spyware problems, please post in this thread.

Regards Howard

This thread is for the use of xyz_cityhunter only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.