TechSpot

Problems with virus, please help..

By schenne
Jan 10, 2008
  1. Hi.
    I´ve got som problems with my computer.
    I did all the scannings with the programs you recommended and I include my logs.
    The result from AVG Anti-RootKit Free LOGresults

    C:\Windows\system32\drivers\ag9zlaOe.SYS Hidden driver file (Rootkit type)

    I´ve got theese problems:
    1. When I´m on the internet I often got a popup-site:
    http://c5.zedo.com/jsc/c5/ff2.html?n=377;c=216;s=36;d=22;w=800;h=600
    It´s so frustrated...

    2.
    My computer is slow on the Internet

    3.
    I´ve got pup-up messages like (in swedish so my translation isn't soo good..): explorer.exe User/J/TMPE786.tmp (example) isn't designed to run on Windows or it´s installed wrong...

    4. When I push my Internet explorer icon on the desktop I got this error message: It´s impossible to find :: (2559A1F4-21D7-11D4-BDAF-00C04F60BF0). Control that you had indicate the right searchway or Internet adress. (This is maybe not a virus thing or?? maybe you got an solution?)

    When I did all the scannings it seems to run a little bit smoother but please look in my logs and see if there´s more to erase.

    Thanks, my first message here
    schenne
     
  2. schenne

    schenne TS Rookie Topic Starter

    One more thing, I also get this message often:

    "ndt2.sys has stopped working"..got it right now acyually..
     
  3. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

  4. schenne

    schenne TS Rookie Topic Starter

    Hi!
    Back from the travelling:)
    I´ve did a full scan with that program and here´s the logs, once again.

    My scan with AVG RootKit now gives me this:

    c:\windows\system32\Drivers\aaz7a8lz.SYS Rootkit type: Hidden driver file

    From my list number 4 still exist. Any suggestion?
    And last, how´s my logs then? Is they clean now?
    Thank´s for your time.

    schenne
     
  5. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

  6. schenne

    schenne TS Rookie Topic Starter

    Just one question:

    Shall I remove this or not:
    My scan with AVG RootKit now gives me this:

    c:\windows\system32\Drivers\aaz7a8lz.SYS Rootkit type: Hidden driver file
     
  7. kimsland

    kimsland Ex-TechSpotter Posts: 14,524

    Yes

    Actually to be safe, rename aaz7a8lz.SYS to aaz7a8lz.OLD

    Restart, no errors
    Then delete
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...