J jackwalsh20 Posts: 26 +0 Feb 28, 2008 #1 Ok I know there have been many threads metioning this virus but i guess i need my own thread to show my log. Please help as this isn't on my computer. I need to know what files to remove
Ok I know there have been many threads metioning this virus but i guess i need my own thread to show my log. Please help as this isn't on my computer. I need to know what files to remove
K kimsland Posts: 13,806 +3 Feb 28, 2008 #2 Hi jackwalsh20 :wave: and welcome to TechSpot One of your loading files:qrmwwgdjlft.exe doesn't have much information on it, and I do think there are other issues on a quick scan through your log. For that reason it is recommended that you follow the following guide and report back here, once complete: ==>Viruses/Spyware/Malware, preliminary removal instructions<==
Hi jackwalsh20 :wave: and welcome to TechSpot One of your loading files:qrmwwgdjlft.exe doesn't have much information on it, and I do think there are other issues on a quick scan through your log. For that reason it is recommended that you follow the following guide and report back here, once complete: ==>Viruses/Spyware/Malware, preliminary removal instructions<==
J jackwalsh20 Posts: 26 +0 Feb 29, 2008 #3 Updated Logs Here are the updated logs, following these steps from the link listed on the previous post
Updated Logs Here are the updated logs, following these steps from the link listed on the previous post
D DelJo63 Feb 29, 2008 #5 suspects: C:\WINDOWS\system32\qrmwwgdjlft.exe O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O4 - HKLM\..\Run: [qrmwwgdjlft] C:\WINDOWS\system32\qrmwwgdjlft.exe O4 - HKLM\..\RunServices: [qrmwwgdjlft] C:\WINDOWS\system32\qrmwwgdjlft.exe ??? O16 - DPF: {0A706A23-DEF4-4C4B-B1F6-96AAB61F2257} (TIExpertControl Object) - https://techinline.net/Expert/TIEXpert.cab O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab (see this) O23 - Service: Print Spooler Service (lywujoam) - Unknown owner - C:\WINDOWS\system32\qrmwwgdjlft.exe
suspects: C:\WINDOWS\system32\qrmwwgdjlft.exe O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O4 - HKLM\..\Run: [qrmwwgdjlft] C:\WINDOWS\system32\qrmwwgdjlft.exe O4 - HKLM\..\RunServices: [qrmwwgdjlft] C:\WINDOWS\system32\qrmwwgdjlft.exe ??? O16 - DPF: {0A706A23-DEF4-4C4B-B1F6-96AAB61F2257} (TIExpertControl Object) - https://techinline.net/Expert/TIEXpert.cab O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1006.cab (see this) O23 - Service: Print Spooler Service (lywujoam) - Unknown owner - C:\WINDOWS\system32\qrmwwgdjlft.exe
J jackwalsh20 Posts: 26 +0 Mar 3, 2008 #6 Here's Combofix By the way the things you said i removed but it didnt get rid of the picture virus that says "Picture of me at a beach"
Here's Combofix By the way the things you said i removed but it didnt get rid of the picture virus that says "Picture of me at a beach"