This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

recurring zbot.g virus - rogurkiller report

1 min read

This thread's last reply is from November 27, 2011, 2:29 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

swiiper
November 27, 2011, 12:39 PM UTC
I had a similar named post closed before I could do this - anyway after much trying I got this to work.Next step?

RogueKiller V6.1.10 [11/18/2011] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/fi ... guekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Michael [Admin rights]
Mode: Scan -- Date : 11/27/2011 12:33:52

¤¤¤ Bad processes: 2 ¤¤¤
[SVCHOST] svchost.exe -- C:\WINDOWS\system32\svchost.exe -> KILLED [TermProc]
[SVCHOST] svchost.exe -- C:\WINDOWS\system32\svchost.exe -> KILLED [TermProc]

¤¤¤ Registry Entries: 4 ¤¤¤
[SUSP PATH] HKCU\[...]\Run : ToyUlixq (C:\Documents and Settings\Michael\Local Settings\Application Data\llhibira\toyulixq.exe) -> FOUND
[SUSP PATH] HKUS\S-1-5-21-3870564424-1140265585-552937611-1005[...]\Run : ToyUlixq (C:\Documents and Settings\Michael\Local Settings\Application Data\llhibira\toyulixq.exe) -> FOUND
[SUSP PATH] HKLM\[...]\Winlogon : Userinit (C:\WINDOWS\system32\userinit.exe,,C:\Documents and Settings\Michael\Local Settings\Application Data\llhibira\toyulixq.exe) -> FOUND
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ Infection : ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
127.0.0.1 localhost


Finished : << RKreport[1].txt >>
RKreport[1].txt
Wingman
November 27, 2011, 2:29 PM UTC
Your previous topic was closed due to lack of response. As stated in the closure post, please submit a fresh set of DDS reports, as mentioned below and wait for a new helper.
You may include links to your original topic and this topic, for reference.
By posting only a report requested by a previous helper, it is likely that your topic will be passed by and you will not receive the help you're requesting.

If you still need help, please start a new thread an include your DDS logs:

  • DDS.txt.
  • Attach.txt.
  • Details of the problems you're experiencing.


If for any reason you can't run DDS, please let us know in your post. Make sure to include links to your previous topics (including this one) for your new helper to reference.

This topic will now be closed.