This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Stress Removal

My computer is so infected

1 min read

This thread's last reply is from May 30, 2010, 9:54 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

xanor
My computer is so infected... Today i scanned it with Advanced system protector from systweak and it detected these malwares...

win antivirus pro 2006 registry keys
rogue program ms antispyware 2009 registry keys
worm.viking registry keys and files
trojan.patched.hv files and folders

Here are some results of the files that i uploaded to virustotal to check if any other program detects the viruses...

This was not detected at least system protector detected it as trojan.patched http://www.virustotal.com/analisis/d3b69a8b59e07e775f99871c4ad107a4f72f392325695e7f261f6aa6e590d4e6-1275241817

This here was not detected http://www.virustotal.com/analisis/d3b69a8b59e07e775f99871c4ad107a4f72f392325695e7f261f6aa6e590d4e6-1275241998

The worm.viking was not detected http://www.virustotal.com/analisis/bf8e7a04cfc79fcedf23b652b9468b8a719a035e72bd4a3495b12524825ac371-1275242171

I also have these hidden registry keys that antivir detects:

Windows Registry Editor Version 5.00

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
"ParseAutoexec"="1"
"ExcludeProfileDirs"="Local Settings;Temporary Internet Files;History;Temp"
"BuildNumber"=dword:00000a28

HKEY_USERS\S-1-5-21-436374069-1123561945-682003330-500\Software\Microsoft\Windows\CurrentVersion\MSXmlSl\node_moxhzyfpejfmhmaosabewevrisubqbzvnzjpiphobhbdykejfmoiw
[NOTE] The registry entry is invisible.
HKEY_USERS\S-1-5-21-436374069-1123561945-682003330-500\Software\Microsoft\Windows\CurrentVersion\MSXmlSl\node_mddhrhzpejfmhmaosabewevrisubqbzvnzjpiphobhbdykejfmoiw
[NOTE] The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet003\Services\NtmsSvc\Config\Standalone\drivelist
[NOTE] The registry entry is invisible.
melboy MRU Expert
Hi

If you think you are infected you need to read >>this<< and start a new topic >>here<<

Then post the required logs and a description of your problems.