hldrrr.exe. srosa.sys, wintems.exe

[balzaraikin]

Hello everyone. I found a few posts while trying to solve a problem with hldrrr.exe, srosa.sys and wintems.exe. It seems they were created by the I-Worm/Bagle beast. I've seen a lot of expert advice on the issue which looks effective, but time-consuming. I'm a novice, but figured out a much easier way to prevent this worm from replicating when rebooting.

"BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)


Preliminary Notes:

Please do NOT turn off System Restore trying to remove an infection. Doing so would only serve to destroy a known restore point (not good) and won't remove the malware. Let your helper advise you as to when a System Restore flush is called for.

[Shaba]

Hi balzaraikin

"This took me to Safe Mode where I was able to run System Restore and that easily solved the problem"

Using System Restore keeps malware stored in restore points so that is really no complete solution at all, unfortunately.

I recommend to post back a fresh HijackThis log :)

[Shaba]

Due to the lack of feedback this Topic is closed.

If it has been five days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.

If it has been less than five days since your last response and you need the thread re-opened, please send a private message (pm). A valid, working link to the closed topic is required.

Everyone else please begin a New Topic.