Help Please ...kxvo.exe virus

Don604 · Sep 18, 2009

About 6-7 days ago my computer was infected kxvo.exe virus...I'm pretty sure I got it from a friends USB stick, Later that day when He left, I rebooted my computer and I got a Kvxo.exe error, I googled it and found out it was a virus...So before I found this wonderful site, I went to msconfig and unchecked it so it would not start on boot up. I ran Malwarebytes and removed kvxo from the registry manually...I'm not sure If I have got rid of the problem completely...I followed all the instructions in the Read Me section and have attached my logs.

Couple things to note:
-I use the infected computer for media therefor I don't use a internet connection on it at all

-Windows XP Pro 32Bit OS, Service pack 3

-The only step I missed in the process was installing Windows XP Recovery
Console as I have no internet connection but had already passed the stage
when I found out You can manually install it.

-The RootReneal showed a error at the start "Error - Invalid PE image found!"
But still did the scanning anyway.

-I noticed a yellow explamation mark on the bottom of my task bar, at first
around the time installed RootReneal...and once more after I finished all
the scans...it disapears when I click on it.

-I have disabled autorun on all usb/drives.

If any Professional Techy could help me out and check out my logs to see If I am virus free, I would greatly appreciate that, Thank You very much.

Don604 · Sep 18, 2009

Log file:

TimW · Sep 23, 2009

Why is there no AV program on this machine?

You need to read this:
Warning about Porn, Keygens, Cracks, and other Illegal Software

The only things I am seeing are these:
C:\WINDOWS\system32\ku4fvpe.dll
C:\WINDOWS\system32\ku4fvpe.tgz
C:\WINDOWS\system32\wbuy6ft.dll

Use windows explorer to find and delete them.

Tell me what issues you may still have.

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real-time protection. They are useful as backup scanners.They do not use any significant amount of resources ( except a little disk space ) until you run a scan.

If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)

Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required

"%userprofile%\Desktop\combofix" /u

Notes: The space between the combofix" and the /u, it must be there.

This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Go to add/remove programs and uninstall HijackThis.

Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

If you are running Vista, Windows XP or Windows ME, do the below:

Refer to the cleaning procedures in step 3 the READ ME for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.

Then reboot and Enable System Restore ato create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Log in or Sign up

Help Please ...kxvo.exe virus

Don604 Private E-2

Attached Files:

ComboFix.txt

mbam-log-2009-09-18 (11-11-04).txt

MGlogs.zip

RRlog.txt

Don604 Private E-2

Attached Files:

SUPERAntiSpyware Scan Log - 09-16-2009 - 22-07-47.log

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member