PDA

View Full Version : Bifrose.LA Fake.Wget !! about to kill myself seriousely



tekken
2007-06-05, 07:28
Ok first time i got this virus i just reformatted my computer as it tried a billion times before trying to fix it by spyware removal tools but failed. Now all of a sudden i installed spybot again to run a virus check and these 2 fricken virus are still there!! i dont want to reformat my computer again. Can someone please help me out its driving me absolutely crazy ive already done some personal internet use and wasnt aware the virus is still here!.

Note: i think i got it from dling office 2007 keygen but i deleted that before i reformated the computer.

this is absolutely driving me crazy , ive read all the other threads about the same virus its just not working for me at all.


anyways here are my logs;

Logfile of HijackThis v1.99.1
Scan saved at 2:01:40 PM, on 6/5/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wscntfy.exe
C:\DOCUME~1\Dean\LOCALS~1\Temp\suchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Dean\Desktop\HijackThis.exe
C:\WINDOWS\system32\wuauclt.exe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [activeds] C:\WINDOWS\system32\activeds.exe
O4 - HKCU\..\Run: [activeds] C:\WINDOWS\system32\activeds.exe
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

tashi
2007-06-05, 07:38
Hello.

I moved your topic to the malware removal forum, as we do not analyse HJT logs in the Spybot-S&D forum. ;)

Please follow the procedure in this link:
"BEFORE you POST" Steps to take Before Requesting Assistance (http://forums.spybot.info/showthread.php?t=288)

Copy/paste the logs requested into this topic, your first hjt log is very short....

A helper will assist you when available.

tashi
2007-06-09, 20:41
This topic has been archived.

If you need it re-opened, please send me a private message (pm) and provide a link to the thread.

Applies only to the original poster, anyone else with similar problems please start a new topic.