How do I remove these virus from my computor?

February 19, 2011 at 04:34:57
Specs: Windows XP
Hello, I recently got some viruses into my PC (runs Windows Dark edition) via flashdisk (they were 'Funny Vids", "Liittle", and other variations of the Win32/conficker x worm, win32 adware agent nki application, win32 sality, inf autorun)).
My eset was cleaning em fine until it froze and I had to restart my comp. this caused the virus to get in my programs and the eset, so I had to re-install it.
These are the error messages I get when I try and run some programs:

MEDIA PLAYER CLASSIC ERROR: RUNTIME ERROR

PROGRAM: C:\PROGRAM...
R6002
-floating point support not loaded

AVA FIND UNINSTALLED (when i clivk the icon it says :preparing to install)


WINDOWS PICTURE AND FAX VIEWER ERROR: rundll32.exe-Unable To Locate Component

This application has failed to start because .dll was not found. Re-installing the application may solve this problem
C:\WINDOWS.0\system32\shimgvw.dll is missing

PAINT ERROR: mspaint.exe-Unable To Locate Component

This application has failed to start because .dll was not found. Re-installing the application may fix this problem.

INTERNET EXPLORER ERROR: iexplore.exe-Unable To Locate Component

This application has failed to start because SHL.dll was not found. Re-installing the application may fix this problem.

C:\System Volum Information is not accessible
Access is denied.

SyncToy Error: SyncToy.exe-Application Error
This application failed to initialize properly (0xc0000135).Click on OK to terminate the application.

NERO 8 NERO SCOUT ERROR: This program requires the file advrcntr3.dll, which was not found on this system.

I ran Malwarebytes antimalware (the viruses are at the bottom of the post) and superantimalware pro and both removed some of the viruses, but I can still see some in the System32 folder in the windows folder.
I also ran the rkill.snr which killed two malware processes (the log is also at the bottom), but the programs still don't work and I ge this blank dialogue box on the bottom right of my screen.
I'm hesitant to use ZHPDiag.exe.

<a href="<a href="<a href="">">">
RKILL LOG:

Processes terminated by Rkill or while it was running:

C:\WINDOWS.0\Explorer.EXE
C:\WINDOWS.0\System32\rundll32.exe


MALWAREBYTES LOG:

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 5
Folders Infected: 0
Files Infected: 50

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman (Worm.Palevo) -> Value: Taskman -> No action taken.

Registry Data Items Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (PUM.Hijack.TaskManager) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools (PUM.Hijack.Regedit) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Folders Infected:
(No malicious items detected)

Files Infected:
c:\documents and settings\administrator\application data\hbnuh.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\application data\hztxr.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\04309.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\044888.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\049930.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\0897.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\093716.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\09399.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\102.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\126384.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\140727.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\1425354.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\159481.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\1711.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\2653.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\2698759.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\2701.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\3118.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\73489.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\3412.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\34228.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\3522284.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\3683.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\41671.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\5196.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\5249.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\534.exe (Trojan.Agent.Gen) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\5545682.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\5960.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\607650.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\69010.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\761.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\809.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\81841.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\860.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\925451.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\9275682.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\930043.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\933.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\938088.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\943547.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\9861.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\98771.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\administrator\local settings\Temp\988.exe (Worm.VBNA) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\temporary internet files\Content.IE5\96V9F31P\ntweewc[1].jpg (Extension.Mismatch) -> No action taken.
c:\documents and settings\networkservice.nt authority\local settings\temporary internet files\Content.IE5\CDAV4HUB\fczng[1].gif (Extension.Mismatch) -> No action taken.
c:\program files\usb safely remove\usr.exe (Trojan.Agent) -> No action taken.
h:\element\ib2 kingstone\virtual dj\acecrack-virtualdj_2.00.exe (RiskWare.Tool.CK) -> No action taken.
h:\element\immanuel's stuff\anti virus programs\small onetimes\antibrontoka-en.exe (Trojan.Dropper) -> No action taken.
c:\documents and settings\administrator\application data\mrpky.exe (Trojan.Agent) -> No action taken.



See More: How do I remove these virus from my computor?

Report •


#1
February 19, 2011 at 17:02:00

Report •

#2
February 20, 2011 at 10:37:35
I've tried starting the computer on safe mode by pressing f8 several times quickly when it starts, but it just makes a beeping sound and nothing happens

Report •

#3
February 20, 2011 at 11:17:57
Practice on a good comp, just to make sure you have the routine down pat.

Also, make sure that F8 is the right command for your comp. ( use google, if you don't have a manual )


Report •

Related Solutions


Ask Question