help w/ vyyqz.exe

djkdm · Aug 9, 2014

so i ran all the steps along w/ the programs and listed instructions and i'm still having problems.

cpu usage is still super high and this virus aka a program listed as "maskiseft visual studie 2010" under the windows task manager > processes.

please advise on further action.

also, the instructions said not to remove the infections and ignore on a couple programs, so like i said please advise on further aciton and thank you.

TimW · Aug 9, 2014

If you haven't already, rerun MBAM and have it remove all it found. Do the same for Hitman.

Then rerun RogueKiller and have it remove these items:

Code:

¤¤¤ Registry Entries : 14 ¤¤¤
[Suspicious.Path] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | {bc64701c-23fe-b962-6c70-e86c85da2c16} : "C:\ProgramData\Microsoft\{bc64701c-23fe-b962-6c70-e86c85da2c16}\{bc64701c-23fe-b962-6c70-e86c85da2c16}.exe"  -> FOUND
[Suspicious.Path] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | Cyyrg : "C:\Windows\system32\config\systemprofile\AppData\Roaming\Ivytud\oxuzc.exe"  -> FOUND
[Suspicious.Path] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | Locuofw : C:\Windows\System32\config\systemprofile\AppData\Roaming\Zuewarwa\ymgieqb.exe  -> FOUND
[Suspicious.Path] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | Hegykiowukgavi : "C:\Windows\system32\config\systemprofile\AppData\Roaming\Yrrunyyf\pydeu.exe"  -> FOUND
[Suspicious.Path] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | Wedyywucfuno : "C:\Windows\system32\config\systemprofile\AppData\Roaming\Ukkapoi\vonyo.exe"  -> FOUND
[Suspicious.Path] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run | Ussoyg : C:\Users\KDM\AppData\Roaming\Ipyzag\vyyqz.exe  -> FOUND
¤¤¤ Scheduled tasks : 5 ¤¤¤
[Suspicious.Path] Security Center Update - 1634006123.job -- C:\Users\KDM\AppData\Roaming\Ipyzag\vyyqz.exe -> FOUND
[Suspicious.Path] Security Center Update - 1686330710.job -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Ivytud\oxuzc.exe -> FOUND
[Suspicious.Path] Security Center Update - 1816482452.job -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Zuewarwa\ymgieqb.exe -> FOUND
[Suspicious.Path] Security Center Update - 2622147282.job -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Yrrunyyf\pydeu.exe -> FOUND
[Suspicious.Path] Security Center Update - 338324472.job -- C:\Windows\system32\config\systemprofile\AppData\Roaming\Ukkapoi\vonyo.exe -> FOUND

Reboot and rescan with both Hitman and RogueKiller and attach the new logs.

Kestrel13! · Aug 9, 2014

so i ran all the steps along w/ the programs and listed instructions and i'm still having problems.
Click to expand...

Please attach the MGlogs.zip for TimW. You attached an individual file from inside the main zipped folder which is incorrect.

Log in or Sign up

help w/ vyyqz.exe

djkdm Private E-2

Attached Files:

MGTOOLS filelog.txt

HitmanPro_20140808_2046.log

TDSSKiller.3.0.0.40_08.08.2014_20.37.04_log.txt

malware bytes log.txt

RKreport_SCN_08082014_201826.log

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Log in or Sign up

help w/ vyyqz.exe

djkdm Private E-2

Attached Files:

MGTOOLS filelog.txt

HitmanPro_20140808_2046.log

TDSSKiller.3.0.0.40_08.08.2014_20.37.04_log.txt

malware bytes log.txt

RKreport_SCN_08082014_201826.log

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

Useful Searches