Post Reply 
Virus PROBLEM
Urgent Help
Author Message
Pirata Nervo
NervOS Developer

Posts: 699.4765
Threads: 39
Joined: 20th Jun 2007
Reputation: -0.79225
E-Pigs: 19.2466
Offline
Post: #1
Virus PROBLEM
Guys i need urgent HELP!

I have a virus here that cannot be removed/desinfected/moved

the infected file is Windows/system32/unsrvc.exe
and that files connects to a web page wich contains malware (Trojan.Downloader - High Risk).
I cannot delete that file.

I think the only solution is run the windows cd and repair.

Right?

21/12/2007 04:19 AM
Visit this user's website Find all posts by this user Quote this message in a reply
diego
poof

Posts: 7,826.1659
Threads: 264
Joined: 22nd Jun 2007
Reputation: 1.80067
E-Pigs: 37.4012
Offline
Post: #2
RE: Virus PROBLEM
the anti-viruses won't work?

I use NJOD32 and have had no problems/

I would just suggest reformatting your PC.

[Image: cce6aa9e-c40c-4ae7-aebe-d7780d6fc009.gif]
21/12/2007 04:35 AM
Find all posts by this user Quote this message in a reply
UncertainGod
Illogical mindfuckery

Posts: 1,492.4476
Threads: 88
Joined: 16th Aug 2007
Reputation: -8.70083
E-Pigs: 7.1412
Offline
Post: #3
RE: Virus PROBLEM
Sounds like a variant of the Trojan.Win32.VB.bkz Trojan, if it is it shouldn't be difficult to remove at all. What AV are you using because almost all can remove that trojan in safe mode. If you can't remove it in safe mode you could boot into safe mode again and  run;

Code:
sfc /scannow


at the command prompt, it will replace any non-standard files in your windows install.

21/12/2007 04:39 AM
Find all posts by this user Quote this message in a reply
Pirata Nervo
NervOS Developer

Posts: 699.4765
Threads: 39
Joined: 20th Jun 2007
Reputation: -0.79225
E-Pigs: 19.2466
Offline
Post: #4
RE: Virus PROBLEM
well Im reparing the windows folder, if it doesn't work i will use that in the recovery console.
i used BitDefender 8 and it didnt work, i used kaspersky 8 and 7 and it didnt work.
they detect but they can't remove the virus :X
the virus name is Trojan.Downloader.VB.something here that i don't remember
(the name may be wrong as i don't remember if it is the correct name)

21/12/2007 05:38 AM
Visit this user's website Find all posts by this user Quote this message in a reply
boogschd
boogyman
Worlds End

Posts: 4,954.3196
Threads: 90
Joined: 29th Nov 2007
Reputation: 4.19708
E-Pigs: 43.6852
Offline
Post: #5
RE: Virus PROBLEM
try looking at the processes in taskman .... if its in there or theres something that is not familiar to you ... end that process then try to delete the virus
21/12/2007 05:53 AM
Visit this user's website Find all posts by this user Quote this message in a reply
Pirata Nervo
NervOS Developer

Posts: 699.4765
Threads: 39
Joined: 20th Jun 2007
Reputation: -0.79225
E-Pigs: 19.2466
Offline
Post: #6
RE: Virus PROBLEM
too late lol, the windows folder was deleted and it is reinstalling it..

21/12/2007 05:55 AM
Visit this user's website Find all posts by this user Quote this message in a reply
Vegetano1
$urf

Posts: 9,083.2507
Threads: 397
Joined: 2nd Mar 2007
Reputation: 6.06988
E-Pigs: 2756.6280
Offline
Post: #7
RE: Virus PROBLEM
There are tools where you select a file and after reboot the files are deleted,.

I don't know the name of the tool anymore,. sorry,..


Make loads of $$!! it wurks!!
[Image: csbanner_anim_03.gif]
Signed Homebrew by bsanehi & OMightyBuggy
http://endlessparadigm.com/forum/showthr...?tid=25707
Spoiler for My miniBlog:
21/12/2007 05:56 AM
Visit this user's website Find all posts by this user Quote this message in a reply
diego
poof

Posts: 7,826.1659
Threads: 264
Joined: 22nd Jun 2007
Reputation: 1.80067
E-Pigs: 37.4012
Offline
Post: #8
RE: Virus PROBLEM
yeah one tool you could have used is Unlocker.
it ends the process of a file so you can delete it, or if it still can't be deleted it will be by the next reboot.

[Image: cce6aa9e-c40c-4ae7-aebe-d7780d6fc009.gif]
21/12/2007 05:58 AM
Find all posts by this user Quote this message in a reply
Anger
Angered Observer (0).(0)

Posts: 605.8490
Threads: 4
Joined: 14th Apr 2007
Reputation: 1.65651
E-Pigs: 5.4993
Offline
Post: #9
RE: Virus PROBLEM
i swear by that tool - it can unlock any process and allow it to be terminated.
yeah its far simpler to terminate unknow process via taskman until you get the right one and when you do you can then simply delete the offending file.

Always remember - Google is your friend :)

[Image: avatar_416_482669e4.jpg]
21/12/2007 06:05 AM
Find all posts by this user Quote this message in a reply
Pirata Nervo
NervOS Developer

Posts: 699.4765
Threads: 39
Joined: 20th Jun 2007
Reputation: -0.79225
E-Pigs: 19.2466
Offline
Post: #10
RE: Virus PROBLEM
well Im almost done with all drivers! I hope everything is fixed now..

21/12/2007 06:11 AM
Visit this user's website Find all posts by this user Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread: 2 Guest(s)

 Quick Theme: