RE: Virus removal help please!

RE: Virus removal help please!

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
RE: Virus removal help please! helpme 09-21-2005
Posted by =?Utf-8?B?aGVscG1l?= on September 21, 2005, 8:42 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Sorry here they are I forgot to post them before.

-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Wednesday, September 21, 2005 18:21:59
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build
2600)
Kaspersky On-line Scanner version: 5.0.67.0
Kaspersky Anti-Virus database last update: 22/09/2005
Kaspersky Anti-Virus database records: 141420
-------------------------------------------------------------------------------

Scan Settings:
        Scan using the following antivirus database: standard
        Scan Archives: true
        Scan Mail Bases: true

Scan Target - My Computer:
        A:\
        C:\
        D:\
        E:\

Scan Statistics:
        Total number of scanned objects: 33098
        Number of viruses found: 6
        Number of infected objects: 19
        Number of suspicious objects: 0
        Duration of the scan process: 1664 sec

Infected Object Name - Virus Name
C:\Program Files\Norton
AntiVirus\QuarantineC867C3.zip/BlackBox.class        Infected:
Exploit.Java.ByteVerify
C:\Program Files\Norton
AntiVirus\QuarantineC867C3.zip/VerifierBug.class        Infected:
Exploit.Java.ByteVerify
C:\Program Files\Norton
AntiVirus\QuarantineC867C3.zip/Beyond.class        Infected:
Trojan-Downloader.Java.OpenConnection.aa
C:\Program Files\Norton AntiVirus\QuarantineC867C3.zip        Infected:
Trojan-Downloader.Java.OpenConnection.aa
C:\Program Files\Norton
AntiVirus\Quarantine696495.zip/GetAccess.class        Infected:
Trojan.Java.ClassLoader.c
C:\Program Files\Norton
AntiVirus\Quarantine696495.zip/InsecureClassLoader.class        Infected:
Exploit.Java.Bytverify
C:\Program Files\Norton
AntiVirus\Quarantine696495.zip/Dummy.class        Infected:
Trojan.Java.ClassLoader.Dummy.a
C:\Program Files\Norton
AntiVirus\Quarantine696495.zip/Installer.class        Infected:
Trojan-Downloader.Java.OpenConnection.v
C:\Program Files\Norton AntiVirus\Quarantine696495.zip        Infected:
Trojan-Downloader.Java.OpenConnection.v
C:\Program Files\Norton
AntiVirus\QuarantineB8F0C39.zip/GetAccess.class        Infected:
Trojan.Java.ClassLoader.c
C:\Program Files\Norton
AntiVirus\QuarantineB8F0C39.zip/InsecureClassLoader.class        Infected:
Exploit.Java.Bytverify
C:\Program Files\Norton
AntiVirus\QuarantineB8F0C39.zip/Dummy.class        Infected:
Trojan.Java.ClassLoader.Dummy.a
C:\Program Files\Norton
AntiVirus\QuarantineB8F0C39.zip/Installer.class        Infected:
Trojan-Downloader.Java.OpenConnection.v
C:\Program Files\Norton AntiVirus\QuarantineB8F0C39.zip        Infected:
Trojan-Downloader.Java.OpenConnection.v
C:\Program Files\Norton
AntiVirus\Quarantine0D0F5B.zip/GetAccess.class        Infected:
Trojan.Java.ClassLoader.c
C:\Program Files\Norton
AntiVirus\Quarantine0D0F5B.zip/InsecureClassLoader.class        Infected:
Exploit.Java.Bytverify
C:\Program Files\Norton
AntiVirus\Quarantine0D0F5B.zip/Dummy.class        Infected:
Trojan.Java.ClassLoader.Dummy.a
C:\Program Files\Norton
AntiVirus\Quarantine0D0F5B.zip/Installer.class        Infected:
Trojan-Downloader.Java.OpenConnection.v
C:\Program Files\Norton AntiVirus\Quarantine0D0F5B.zip        Infected:
Trojan-Downloader.Java.OpenConnection.v

Scan process completed.


Spyware Doctor Activity Report
Generated on 9/21/2005 7:05:33 PM         
Spyware Doctor Homepage                PC Tools Homepage                Technical Support        
Scans (basic information only):
Scan Results:
scan start:         9/21/2005 7:05:50 PM
scan stop:         9/21/2005 7:11:30 PM
scanned items:         53356
found items:         15
found and ignored:         0
tools used:         General Scanner, Process Scanner, Hosts scanner, LSP Scanner,
Registry Scanner, Browser Defaults, Favorites and ZoneMap Scanner, ActiveX
Scanner, Browser Activity Scanner, Disk Scanner
                        
        Infection Name         Location         Risk
        CWS.XPSystem         C:\Documents and Settings\Dennis Stacy\Cookies\dennis
stacy@searchportal.information[1].txt         Medium
        CWS         C:\WINDOWS\khlhw.txt         High
        CWS         C:\WINDOWS\owqdn.txt         High
        CWS         C:\WINDOWS\system32\akclf.log         High
        CWS         C:\WINDOWS\system32\ekzwe.log         High
        CWS         C:\WINDOWS\system32\fahox.txt         High
        CWS         C:\WINDOWS\system32\hdkfs.txt         High
        CWS         C:\WINDOWS\system32\homsk.txt         High
        CWS         C:\WINDOWS\system32\mdhmx.log         High
        CWS         C:\WINDOWS\system32\nuczn.txt         High
        CWS         C:\WINDOWS\system32\qpaqd.txt         High
        CWS         C:\WINDOWS\system32\vxzpo.log         High
        CWS         C:\WINDOWS\system32\ynkke.log         High
        CWS         C:\WINDOWS\whdig.txt         High
        CWS         C:\WINDOWS\xkemp.txt         High
                        

Other Sections:

Copyright © 2003-2005. Distributed by PC Tools.         Legal Notice
sigs
Click to go back



"helpme" wrote:

> Folowing is a post of scan results. Can someone please give me easy to
> understand directions on going in and removing these form my pc. Thank you
> for your help.

Posted by David H. Lipman on September 21, 2005, 9:11 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

< report sniped >

| Can someone please give me easy to understand directions on going in and
removing these
form my pc. Thank you

Delete the following...

C:\WINDOWS\khlhw.txt
C:\WINDOWS\owqdn.txt
C:\WINDOWS\system32\akclf.log
C:\WINDOWS\system32\ekzwe.log
C:\WINDOWS\system32\fahox.txt
C:\WINDOWS\system32\hdkfs.txt
C:\WINDOWS\system32\homsk.txt
C:\WINDOWS\system32\mdhmx.log
C:\WINDOWS\system32\nuczn.txt
C:\WINDOWS\system32\qpaqd.txt
C:\WINDOWS\system32\vxzpo.log
C:\WINDOWS\system32\ynkke.log
C:\WINDOWS\whdig.txt
C:\WINDOWS\xkemp.txt

You can execute NOTEPAD.EXE then copy & paste the following into NOTEPAD and
then save the
file as; CLEAN.BAT to do the above in a batch file.
{ Note: The the lines should not be wrapped in notepad for batch file to work }


@echo off
cd %windir%
for %%f in ( khlhw.txt owqdn.txt whdig.txt xkemp.txt ) do del %%f
cd %windir%\system32
for %%f in ( akclf.log ekzwe.log fahox.txt hdkfs.txt homsk.txt mdhmx.log
nuczn.txt
qpaqd.txt vxzpo.log ynkke.log ) do del %%f



Then dump the contents of the Norton Quarantine. Do that from within NAV.

I also suggest the following...

1) Dump the contents of your IE cache -
Start --> settings --> control panel --> Internet options --> delete
files

2) Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
Tools --> Options --> Privacy --> Cache --> Clear

3) Dump the contents of your Sun Java cache - { if you use Sun Java }
Start --> settings --> control panel --> Java applet --> cache --> clear
or
Start --> settings --> control panel --> Java applet --> general -->
settings -->
delete files

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by =?Utf-8?B?aGVscG1l?= on September 25, 2005, 8:06 pm
If you were  Registered and logged in, you could reply and use other advanced thread options


"David H. Lipman" wrote:

>
> < report sniped >
>
> | Can someone please give me easy to understand directions on going in and
removing these
> form my pc. Thank you
>
> Delete the following...
>
> C:\WINDOWS\khlhw.txt
> C:\WINDOWS\owqdn.txt
> C:\WINDOWS\system32\akclf.log
> C:\WINDOWS\system32\ekzwe.log
> C:\WINDOWS\system32\fahox.txt
> C:\WINDOWS\system32\hdkfs.txt
> C:\WINDOWS\system32\homsk.txt
> C:\WINDOWS\system32\mdhmx.log
> C:\WINDOWS\system32\nuczn.txt
> C:\WINDOWS\system32\qpaqd.txt
> C:\WINDOWS\system32\vxzpo.log
> C:\WINDOWS\system32\ynkke.log
> C:\WINDOWS\whdig.txt
> C:\WINDOWS\xkemp.txt
>
> You can execute NOTEPAD.EXE then copy & paste the following into NOTEPAD and
then save the
> file as; CLEAN.BAT to do the above in a batch file.
> { Note: The the lines should not be wrapped in notepad for batch file to work
}
>
>
> @echo off
> cd %windir%
> for %%f in ( khlhw.txt owqdn.txt whdig.txt xkemp.txt ) do del %%f
> cd %windir%\system32
> for %%f in ( akclf.log ekzwe.log fahox.txt hdkfs.txt homsk.txt mdhmx.log
nuczn.txt
> qpaqd.txt vxzpo.log ynkke.log ) do del %%f
>
>
>
> Then dump the contents of the Norton Quarantine. Do that from within NAV.
>
> I also suggest the following...
>
> 1) Dump the contents of your IE cache -
> Start --> settings --> control panel --> Internet options --> delete
files
>
> 2) Dump the contents of the Mozilla FireFox Cache { if you use FireFox }
> Tools --> Options --> Privacy --> Cache --> Clear
>
> 3) Dump the contents of your Sun Java cache - { if you use Sun Java }
> Start --> settings --> control panel --> Java applet --> cache -->
clear
> or
> Start --> settings --> control panel --> Java applet --> general -->
settings -->
> delete files
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
> Dave
I understand how to copy and paste the batch to note pad, but I do not
understand the rest. Can you give a more detailed instruction. I am very
novice and do not know much about pc's.
Thank you.

Similar ThreadsPosted
Virus removal help please! September 21, 2005, 8:39 pm
virus removal December 4, 2005, 4:51 am
Uninstall/removal of MRT (Microsoft Malicious Software Removal Tool) November 13, 2006, 9:03 am
Removal of Trojan Virus Startpage June 27, 2005, 12:25 pm
Removal of Virus/Trojan DLLs ? November 25, 2007, 12:13 am
McAfee virus removal service - Genuine? February 27, 2008, 3:19 am
Removal of Virus/Trojan DLLs ? (more decom tips) November 28, 2007, 9:32 am
Re: virus diables registry, task manager, run button, and more...help removal September 27, 2005, 8:23 am
virus diables registry, task manager, run button, and more...help removal September 27, 2005, 7:33 am
lop.com removal tool? August 28, 2005, 1:43 am

The site map in XML format XML site map

Contact Us | Privacy Policy