memory virus can't get rid off...

2days trying to find out what could be the issue with this virus with Nod32 v4 lateset build.

every time i scan operating memory it give me this result:


"http://i42.tinypic.com/2610v7k.jpg"

here's my HJT log


~HJ log removed per Announcement.~


Please help.

 

you could build a Rescue CD, boot from it, update definitions and scan your hard drive

 

i did,with latest definitions from rescue disk it's showing no virus in the computer.
but as i log into the windows, the eset gives me this warning msg that i have virus loaded into my memory.

 

hmm, try to scan the computer with mbam

 

Maoten what is the virus name? Does it give a location?

 

Hey man here is some information from Sophos regarding this virus

Troj/TDSS-I is a Trojan for the Windows platform.

When Troj/TDSS-I is installed it creates two files called <Temp>\TDSS<random characters>.tmp.

One of these files is detected as Troj/AdvHack-A, the other as Mal/TDSS-A.


If I were you I would install an Adware program such as Malware Bytes, and run a scan.. Also DELETE your user profile, Turn off System Restore, and post a HiJackthis log result.

 

Oh silly me I didn't see the screenshot, do not post a HJT log, refer to the first post.

Have you tried performing a scan in Safe Mode?

 

Hi maoten,

In order to clean the threat from memory you will need to scan the hard drives as well so the originator can be found and dealt with.

HTH

Cheers

 

http://forum.sysinternals.com/search_results_posts.asp?SearchID=20090305084129&KW=

 

Hi tokatee , nice to see you here as well as the Sysinternal forum. (Btw that link didn't work for me.)

 

Wow this is exactly what I have. This isn't a virus I can let stay, either. It's a backdoor and you can't even search on google without being redirected to about 100 adware sites. I tried installing Malware Bytes but once installed, the program doesn't run. It also disallows you to go onto certain anti-virus/malware sites. I figure it doesn't run for the same reason, the virus. I tried SDFix as well, but now I'm trying HiJack This. It's obnoxious that NOD32 can't clean it just because its running, and it can't even give you the data of where the files are. I've run 2 full scans, 3 safemode scans (unsuccessful) and fiddled around trying to get the location of the actual virus so I can manually remove it. Didn't work, I've been spending the last 2 hours searching for something like this to help.

 

Hi Jurugi,

Please send a log from Sysinspector along with a link to this thread and as much information as possible to support[AT]eset[DOT]com (assuming you have a current license) and be sure and post back to let us know how you get on.

Cheers

 

My brother inlaw just brought me his machine with this infection, I've pulled the drive to scan off a USB device. Seems to be a pain in the a**.

 

I ended up reinstalling XP. I scanned with Spyware Doctor and then uninstalled it, and it deleted an important registry value for my internet connection. Still never found out what that virus was, but don't uninstall NOD32 or things could get really messed up. I uninstalled it before I reinstalled XP and all the services became corrupted. It's possible you won't be able to update NOD32 upon reinstalling as well.