I need some help please!

Please download and run HijackThis from HERE

Please download and run Autoruns from HERE

Please download and run Lookinmypc from HERE

Then forward the logs from all three programs to support @ eset.com with a link to this thread.

Let us know how you go…

Cheers

 

Did u click on "Scan only" or Scan & Clean" ?

 

Yes, I did, but it doesn't matter anymore now, because Eset-support will help you further.

 

Blackspear i will do just now what you have told me!thank you hope to have good results!

cntrlaltdelete i have done both!nothing beter happend!i usely do scan & delete!

Get thank you for your time anyway!
i am going now to do what blackspear tels me!

thank you all!

 

Blackspear i dont understand this?i dont know what are you trying to say to meplease if it possible to you to explain to me
Then forward the logs from all three programs to support @ eset.com with a link to this thread.

 

it is very funny if your in some place to see me!!!xaxaaxax!!!
I have download them i have all of three programms in front of me and i am just looking them and dont know what to do with it!xaxaxax
i am stupiddddddddddddd!

 

When you're done staring read this :

Hijackthis: Unzip in a new folder. Doubleclick "HijackThis.exe". Click "Do a system scan and save a logfile. The logfile (hijackthis.log) will be in the new folder.

Autoruns: Unzip in a new folder. Doubleclick "autoruns.exe". Scanning will start immediately. When it's done click on "File" on top (left) of the screen and click "Save". The log (AutoRuns.txt) will be in the folder.

LookInMyPc: Doubleclick "setupLMPC.exe". Click "Next" on every screen untill you reach the "Shortcuts to install"-screen (the 5th screen I think). On that screen put a tick next to "Install desktop shortcut for LookInMyPc" and then click "Next". On the next screen click "Finish". Doubleclick the LookInMyPc-icon on your desktop. Click "Generate report". When it's done a browserscreen will open with the log. Close this. You can find the log in "C:\Program Files\LookInMyPC\Reports". There's a folder with your username in it and the log is in there. It's the zipfile named "LookInMyPC.zip".

 

and after you find these log files , mail them to ESET's Tech Support support@eset.com

Sorry I wasn't in help

Good luck and pls report back your results , we'll be interested

 

ok i have an idea what i must try to do!
i have read your post!!i realy realy apreciaty your help from all!!!
I have just read it i havent done anything yet i will be gone for the weekend so i will be back on monday morning!
the question is that from the programm Hijack and lookinmypc i found how to get a report but from the other one autorun i havent find how i am going to get a report i will do what ever you told me in your new posts!!!thank you very much!!!!!you are all very polite and helpfull please forgive my english are not so good!!!have a nice and relaxing weekend!
my best regards
paulina

 

http://img132.imageshack.us/img132/2415/autobl5.jpg

 

hello,
i am back again!
i have just make a report from the 3 programs you have told me and mail it from my mail to support@eset.com
now what i am expecting of them?are the going to answer to me here in the forum?or they going to send me a mail to my mail?

 

i have send the e-mail with all the results of the programms to support@eset.com and this is the answer i have got......

Hello,

I haven't found anything suspicious in the log. Once you have deleted the file xvid.dll, your computer should be clean.

But i am not so sure that deleting this file from the system will take out the virus i have because today i have scaned with nod32 after 3 days i have it close my pc and it found another spot with infection exept the one we had always it saw to me that a file volume had an infection same as before!
I am very desipointed and sad also dont what else i must do!

what is your opinion after all this......?

 

Let's start with that, then run a further manual scan and see what it comes up with.

Cheers

 

Since m to do that i tried yesterday to delete it!
But it is not geting out for some reson......
i went as it says windows system32 xvid.dll and nothing happens it is keep saying to me file can not delete it.....
it saying to me exacly yhis that it is impossible to delete xvid because it is not allow to get through
please be sure that your disk are not full, that does not have writing protection and the file is not in use this moment!
that is exacly what is wrote when i am trying to delete that file...

 

Did u really removed the file before with UNDLL ??

 

I made some (Dutch) pictures, maybe it helps.

Start UNDLL.EXE

And select infected DLL

 

1. select the C:\WINDOWS\system32\ folder
2. click on xvid.dll
3. click on "Open"

 

... and follow further instructions on screen.

 

i havent done it that way!i just went to delete it!i will go as you say!!!i will be back!thank you!

 

ok! i went as you told me i have done it! i restart my pc!
i am doing scan and i am geting the same results!

 

C:\WINDOWS\system32\xvid.dll is back?

 

Please try the following:

1. Download, install and update the NOD32 Beta version 2.7

2. Tweak NOD32 up to its maximum settings

3. Make sure you are logged in as an Administrator.

4. Disconnect any network connections.

5. Turn off System Restore: Note by turning OFF System Restore you will NOT be able to ROLL BACK your computer to the current state it is in.

Windows XP Instructions (reference with screen images)

a. Right click on the “My Computer” icon on the Windows desktop.

b. Click “Properties”.

c. Click on the “System Restore”.

d. Place a tick in “Turn off System Restore on all Drives”.

e. Click OK.

f. Close and RESTART your system.

g. Make sure you are logged in as an Administrator.


6. Run 2 scans with the latest beta 2.7 - one with anti-stealth enabled and the other with anti-stealth disabled.

If the total number of scanned files does not match, it must be a new rootkit.

Let us know how you go…

Cheers

 

her i am again with some results!
i found an old friend and he told me to download a program named kaspersky and i have done it and it take all the infections out in once!!!
now i am doing scan with nod32 and always when i waas strting scan before a mesage was coming up in the system operation now it OK!!!!
scaning is finishing and i think everything is ok!i will tell you the total results in a few minuts!

 

After scaning with nod32 results are:
Number of threts found is 0!!!!!!!!!!!!!!!!!!
and i am telling all this because you have helped me so much and mabe nod32 need to get something that the other program have .......dont know much but mabe that the 2 programs was working together virus is gone!
thank you one more time for your respense to my problem!

 

You installed kaspersky anti-virus? Without uninstalling nod32? If so, uninstall kaspersky, because 2 antivirusses isn't a good idea. Also congratulations with your clean pc.