Can't get rid of a virus

S

snorkyller

Member
Do anyone can help me? I can't get rid of a virus. Well, I think it's a virus : tell me what you think:
In windows xp, I can't enable "Show hidden files and folders options" (in folder options). When I come back in the window, it's still on "Don't show hidden files and folder".

I have scanned this computer with the following programs that I have all updated just before.
- Avira antivir
- Super Antispyware
- Malwarebyte's Antimalware
- Spybot search and destroy

I've found many viruses (see below some of them). They were deleted but that didn't solve the issue. I got many warning about autorun.inf files.
I continue to find items in the "system volume information" folder each time I scan the computer again.

Question: I have just installed a ghost image on this computer but I forgot to format the hard drive before (it has been used before by somebody else). Do you think the viruses may have been on the hard drive before I copied the image, or do you think they were within the ghost image?
Would it helps if I format the HD, then copy again the image?

Thanks!

VIRUSES
TR/PSW.Magania.cwpc (virus)
Trojan.Dropper/Gen-NV (cvadds0.dll, herss.exe)
Trojan.Agent/Gen-OnlineGames (S1.exe a lot of .exe file like A0293564.exe in the "system volume information" folders
Application.Agent/Gen-TempZ (run.exe, svruninstall.exe)
Adware.Need2Find

WHAT I'VE TRIED
In HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionExplorerAdvanced, set 'Hidden' to 1
In HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorer
AdvancedFolderHidden, set CheckedValue to 1
Running the following commands:
regsvr32 /i browseui.dll
regsvr32 /i shell32.dll
Use "Smart virus remover" to restore the windows to default.
 
Last edited:
System Volume Information is your system restore points, which its always best to delete them after having an infection. To delete your restore points, just turn off system restore and then turn it back on.

Please post the log from hijackthis.

Hello, please download and post a log with HiJackThis.

Click here to download HJTsetup.exe
  • Save HJTsetup.exe to your desktop.
  • Double click on the HJTsetup.exe icon on your desktop.
  • By default it will install to C:\Program Files\Hijack This.
  • Continue to click Next in the setup dialogue boxes until you get to the Select Additional Tasks dialogue.
  • Put a check by Create a desktop icon then click Next again.
  • Continue to follow the rest of the prompts from there.
  • At the final dialogue box click Finish and it will launch Hijack This.
  • Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
  • Click Save to save the log file and then the log will open in notepad.
  • Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
  • Come back here to this thread and Paste the log in your next reply.
  • DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
 
The problem is solved. :D
Since I wrote my message, I kept doing scans with avira antivir, malwarebytes and superantimalware, and the bug disappeared.

I think I have made 15 scans today, and no viruses were reported the last time.
At a moment, I thought that these scans were useless.

Thank you anyway. ;)
 
You must log in or register to reply here.
Back
Top