#1
Member
Profile: Join Date: Dec 2006
Posts: 37
Computer Experience:
Virus keeps coming back
Hello, I'm having trouble getting rid of a virus, and because it downloads other spyware and viruses, it's hard to know which virus it is. I've run a series of anti-virus and anti-spyware applications, even done a partial reload/repair of windows and still I get stuff popping up. Most recently, AVG warns me that the Win32\Heur virus is present in the c/windows/system32/dmcomposa.dll. Again, because this virus downloads other junk, I can't be sure if this is the virus or just a symptom. Any help would be grand.HJT log. I'll post Deckard's main and extra logs separately as they're too long.SP2 (WinNT 5.01.2600)SP2 (6.00.2900.2180)http://red.clientapps.yahoo.com/cust.../www.yahoo.com http://www.yahoo.com/ http://gamedownload.ijjimax.com/game...lugin11USA.cab http://download.divx.com/player/DivXBrowserPlugin.cab HTTP ) (VAIOMediaPlatform-IntegratedServer-HTTP ) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
Didn't find the information you thought to find?Similar Threads
#2
Member
Profile: Join Date: Dec 2006
Posts: 37
Computer Experience:
Virus part 2 (deckard's main log)
Deckard's System Scanner v20071014.68Total Physical Memory: 503 MiB (512 MiB recommended). SP2 (WinNT 5.01.2600)SP2 (6.00.2900.2180)dss [1].exehttp://red.clientapps.yahoo.com/cust.../www.yahoo.com http://www.yahoo.com/ http://gamedownload.ijjimax.com/game...lugin11USA.cab http://download.divx.com/player/DivXBrowserPlugin.cab HTTP ) (VAIOMediaPlatform-IntegratedServer-HTTP ) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
#3
Member
Profile: Join Date: Dec 2006
Posts: 37
Computer Experience:
Virus part 3 (deckard's extra log - part 1)
Deckard's System Scanner v20071014.68CPU 0: Intel(R) Pentium(R) 4 CPU 3.00GHzCPU 1: Intel(R) Pentium(R) 4 CPU 3.00GHzCF Reader USB DeviceMS Reader USB Device
#5
Member
Profile: Join Date: Dec 2006
Posts: 37
Computer Experience:
virus part 5 (deckard's extra log 4 - too many images to post as 1)
"C:\\Program Files\\World of Warcraft\\WoW-1.8.4.4878-to-1.9.0.4937-enUS-downloader.exe"="C:\\Program Files\\World of Warcraft\\WoW-1.8.4.4878-to-1.9.0.4937-enUS-downloader.exe:*:Enabled:Blizzard Downloader"JS ;.JSE;.WSF;.WSH(admin) Ad -Aware SE Personal --> C:\PROGRA~1\Lavasoft\AD -AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD -AWA~1\INSTALL.LOGPCI Soft Modem --> agrsmdelPCI \VEN_8086&DEV_2782 PCI \VEN_8086&DEV_2582HD Normal Contents --> RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{25CF0627-2EF6-4FCE-A0DE-7D6350C774B2}\setup.exe" -l0x9
#6
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,496
Computer Experience:
Hi Cael WestonHere disable realtime protection applications as they sometimes interfere with the tool. this link for any applicable programs you may have.Close all open programs and windows Double click combofix.exe and follow the prompts.
Vista users When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply
Note: Do not mouseclick combofix's window while its running. That may cause it to stall Note - ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.Note - Combofix makes some changes when run to prevent autorun/autoplay of ALL CDs, floppies and USB devices, to assist with malware removal & increase security. If this is an issue or makes it difficult for you to use those devices, please ask how to reset it.
All times are GMT +1. The time now is 01:00 .
isabled:avp"
