Very nasty virus

Status
Not open for further replies.

ZoSo_kg

Posts: 20   +0
I've got this very nasty virus that changed my desktop, disabled my c drive...
Here's my HJT log please help!
 

Attachments

  • hijackthis.log
    4 KB · Views: 5
Yes, you are infected. But you will need to run the additional programs in the malware cleanup here:
https://www.techspot.com/vb/post645589-1.html

When you have finished, attach the logs for all. When you open HijackThis to scan again, place a check by the following and have HijackFix:
O2 - BHO: QXK Olive - {19538A50-FC56-4E91-8716-2D9D32C6CC5E} - C:\WINDOWS\vanwxemgaet.dll
O2 - BHO: (no name) - {4F7E9D97-BEE7-4F55-811D-19F15F2120AD} - C:\WINDOWS\system32\khfCturQ.dll (file missing)
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O20 - Winlogon Notify: khfCturQ - khfCturQ.dll (file missing)
O21 - SSODL: xrdwbfgn - {41C37E7F-126C-4434-B5DC-9C485D53FE8D} - C:\WINDOWS\xrdwbfgn.dll
Identified as a variant of the VideoAccessCodec adware.
O21 - SSODL: dgksvbpn - {1BFF75C5-4FB8-482F-88B8-E7EBB850DF0B} - C:\WINDOWS\dgksvbpn.dll
Identified as a variant of the VideoAccessCodec adware.

This isn't going to be very effective until files are removed from the system.
 
Status
Not open for further replies.
Back