Sal.xls and Autorun.inf combined
|
Original Message
|
Name: newageBATMAN (by BHABANIPRASADPATI)
Date: March 30, 2007 at 18:16:18 Pacific
Subject: Sal.xls and Autorun.inf combinedOS: WinXp(Sp-3)CPU/Ram: 2.44/256Model/Manufacturer: Lg/MyPc |
Comment: Every drive including my flash drive has a autorun.inf and sal.xls file hidden as a system file. If i delete them, they are reappearing in seconds. I tried to kill the process algssl.exe and get rid of concerned registry entries "Msfir80.exe" & "msime80.exe" and also in system32. But all in hell...they reappearing in seconds. Any tools that can see them off... BHABANIPRASADPATI@GMAIL.COM
Report Offensive Message For Removal
|
|
Response Number 1
|
Name: jabuck
Date: March 30, 2007 at 18:45:41 Pacific
Subject: Sal.xls and Autorun.inf combined |
Reply: (edit) Please post a Hijack This log so that the files associated with the virus/spyware/hijacker can be identified. Please download HJTsetup.exe from this link http://www.thespykiller.co.uk/files/HJTsetup.exe to your desktop. Doubleclick on the HJTsetup.exe icon on your desktop. By default it will install to C:\Program Files\Hijack This. Continue to click "next" in the setup dialogue boxes until you get to the "Select Addition Tasks" dialogue. Put a check by "Create a desktop icon" then click "Next" again. Continue to follow the rest of the prompts from there. At the final dialogue box click "Finish" and it will launch Hijack This. Click on the "Do a system scan and save a logfile" button. It will scan and the log should open in notepad. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log and post it in this thread.
Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly. Please download ComboFix to the desktop from this link: http://download.bleepingcomputer.com/sUBs/ComboFix.exe Double-click combofix.exe Follow the prompts. (Don't click on the window while the program is running, it may cause your system to hang.) Please post the log it produces.
Report Offensive Follow Up For Removal
|
|
Response Number 2
|
Name: newageBATMAN (by BHABANIPRASADPATI)
Date: April 5, 2007 at 07:11:46 Pacific
Subject: Sal.xls and Autorun.inf combined |
Reply: (edit)Thank U. But i solved the program in a more easier method. Actually my virus database(AVG) was not updated for sometime..So before trying anything deadly i tried to update it as last try. Surprisingly it removed total 12 types of files but in a total some 50/60 files from system32 and different reg locations. Whatever be the method thank god the problem is solved ...But thank U for u'r support BHABANIPRASADPATI@GMAIL.COM
Report Offensive Follow Up For Removal
|
|
Response Number 3
|
Name: jabuck
Date: April 5, 2007 at 14:50:21 Pacific
Subject: Sal.xls and Autorun.inf combined |
Reply: (edit)Thanks for the follow-up, not everyone takes the times to let us know there resolves.
Report Offensive Follow Up For Removal
|
Use following form to reply to current message: