Odd virus

Discussion in 'Malware Help (A Specialist Will Reply)' started by jamjas, Mar 10, 2005.

  1. jamjas

    jamjas Private E-2

    I use AVG and I keep getting this:

    http://img.photobucket.com/albums/v48/jamjas/Virus.jpg

    When I try to delete, heal, or move it to the vault it says:
    Requested action is not available for this object.

    Your help would be very appreciated.

    Oh, and the number.exe keeps changing. Like 25990.exe, or 43090.exe. I don't know what the numbers are.
     
  2. PhilliePhan

    PhilliePhan Guest

    Hi Jamjas,

    Generally, in cases like this, it is a good idea to take a spin through the Cleanup Tutorial below:

    READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan and Virus Removal

    There are only a few of us Volunteers who regularly offer advice in this forum. Running through the above Tutorial will remove a lot of stuff that would otherwise clog a HijackThis Log and save us valuable time.

    Please let us know the steps that you are able to complete and the ones that give you problems. Note that you need to be in Safe Mode with System Restore OFF (if you have it) and have the Viewing of Hidden Files ENABLED as per the instructions in the link. Make sure to do the Online Scans.

    Post back and let us know how you fared. Also, send us a HijackThis Log. Please be sure to follow the instructions below:

    Note that your HijackThis should be up-to-date (v1.99.1) and MUST be extracted to its own safe folder – C:\Program Files\HijackThis! Should you need a Fresh Download of HJT, get it HERE: HijackThis v1.99.1

    Also note that, before you scan, you MUST close all running programs including your web browser, e-mail and items in the system tray.

    Please save your HJT Log as a .txt File and attach it via the "Manage Attachments" tool in the Additional Options section when you post.

    Best luck :)
    PP
     
  3. jamjas

    jamjas Private E-2

    I think that did it.
     
  4. TheOldThug

    TheOldThug First Sergeant

    Be sure to post a HJT log so PP can check it.
     
  5. jamjas

    jamjas Private E-2

    I guess it's still there.
    here's my HJT log.
     

    Attached Files:

  6. PhilliePhan

    PhilliePhan Guest

    Hi Jamjas,

    Do you know what this is? C:\Program Files\Archive\archive.exe
    If you want to keep it, leave it out of the instructions below.



    Now, look in Task Manager (Ctrl-Alt-Del) for the following running processes and, if you see it, try to END it:

    archive.exe

    Now scan with HijackThis and Check the Boxes for the following:

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\PCHealth\HelpCtr\System\panels\blank.htm
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\PCHealth\HelpCtr\System\panels\blank.htm

    O4 - HKLM\..\Run: [Archive] C:\Program Files\Archive\archive.exe

    O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe

    Again, make sure All Browser Windows are Closed when you Click FIX.

    NOW:
    Please DELETE the following:

    C:\Program Files\Archive --> The Folder

    NEXT:
    Run CCleaner and Spybot S&D and have Spybot fix what it finds.


    Now, please Scan with HijackThis and attach that log.

    PP :)
     
  7. jamjas

    jamjas Private E-2

    my new log.
     

    Attached Files:

  8. TheOldThug

    TheOldThug First Sergeant

    Jam

    PP would probably like to know if you are currently having any problems.
     
  9. PhilliePhan

    PhilliePhan Guest

    Agreed!
    Are you still having the original issue? Are things running OK now?
    The last HJT log looked OK - I left the "Desktop Weather" item alone, but it is the only iffy item in that log.

    PP :)
     
  10. jamjas

    jamjas Private E-2

    I just got home from work. I'll let you know if I have any problems, or if every thing works okay. Thanks for your help guys.
     
  11. PhilliePhan

    PhilliePhan Guest

    AllRightyThen! Happy to help :)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds