virus, can be deleted but.....

Status
Not open for further replies.

nismo91

Posts: 1,403   +419
hey ppl, i got a case when my frens got this new virus
both my frens were 800km away though
(as i remember win32mobler in removeitpro)
i installed avast and avg antivirus but neither could detect them, so i use simpler method, remove it pro from incodesolutions.com
and it detect that the virus was in the hidden folder
system32\12053 named svchost.exe and lsass.exe and also other exes.
then i delete the folder with unlocker and successfully *heal* the laptop.

but then i found out in the services.msc that, most of the services were stopped and disabled, so i *auto* them with the reference to my healthy pc.

no problem, but theres 2 symtomps were seen and i believe they aren't virus.

first: theres a note (like VB) in the beginning before entering the password in the welcome screen

second: in the main infected account, i still couldnt do RUN and SEARCH
also couldnt set the folder option to *show hidden files and some few options.

basically, i think that theres an unchecked option i left and i need to delete a file in order to delete the *welcome note*


anyone have idea??
 
I have moved your thread to our Security and the web forum.

Let`s see if the system is clean or not.

Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.


Post fresh HJT and AVG Antispyware logs as attachments into this thread, only after doing the above.


Regards Howard :)


This thread is for the use of nismo91 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
 
Status
Not open for further replies.
Back