Coodoosoft

patrickv

Active Member
As per the title guys. I really need some help on this.
is there a definite way to remove this crap ?
Even though I disable it at startup and I would also remove its entry, it would appear again. However there's no process called herss.exe like google said.
The only way for me to know the thing is running i have to go to the user's temp directory and looks for cvas0.dll or similar or i'll end up with this

IAX9p.jpg


This is what happens when printing back to back on the printer. It crashes when the virus is active. I can go to temp, delete herss.exe and remove the dll, try printing and it will work.

Are there any good ways to permanently remove it ?

many thanks
 
get malwarebytes and hijack this... run them both in safemode after updating (best way is to go safemode with networking)

could you give a list of your processes when the virus is active?
 
get malwarebytes and hijack this... run them both in safemode after updating (best way is to go safemode with networking)

could you give a list of your processes when the virus is active?

Malwarebytes doesn't help in this case, tried and tested. I even updated it.Not even hijack this.
I downloaded Spybot S&D and so far it has removed the infection, I have also rebooted a couple of times. So far so good. Will see how long this last :cool:
 
perhaps try googling for the specific infection and then removal... usually works... some people are kind enough to create guides to remove a specific infection.
 
perhaps try googling for the specific infection and then removal... usually works... some people are kind enough to create guides to remove a specific infection.

Yup, Thanks.
I once was on a blog somewhere and it lead me to StopZilla. I downloaded the program and I have to admit.. It sucks major :P
 
Hello:

Download and Run ComboFix
If you already have Combofix, please delete this copy and download it again as it's being updated regularly.
Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall

Combofix should never take more that 20 minutes including the reboot if malware is detected.
If it does, open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.
If that happened we want to know, and also what process you had to end.

In your next reply i will need:
  • The ComboFix log
  • A fresh HiJackThis log
  • An update on how your computer is running
 
Back
Top