QoolAid virus problem

To make a long story short, I got nuked (i believe that's the right term) and managed to get rid of all, but 2 files using panda scan/killbox/ccleaner/hijackthis.

These two...
C:\Windows\System32\hsqvhn.exe
C:\documents and settings\all users\start menu\programs\startup\yadwn.exe

Both are hidden, but are deteched by Killbox. I could only manage to replace it with a dummy file during the reboot with Killbox. On startup however, an msdos window pops up saying hsqvhn.exe is missing, and pops up over and over.

I found out that hsqvhn.exe is a QoolAid virus when I scanned it in the killbox backup folder. I restored the file cause the msdos window kept popping up and it was very annoying.

And yes, I get advertisement popups when I use Internet Explorer.

 

Welcome to MajorGeeks.com, please follow the steps below:

- Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

• Make sure you check version numbers and get all updates.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis:

Downloading, Installing, and Running HijackThis

Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.

When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:

• CounterSpy - ONLY IF you were not able to run Windows Defender
• Bitdefender - from step 6
• Panda Scan - from step 6
• runkeys.txt - the log from GetRunKey.bat
• newfiles.txt - the log from ShowNew.bat
• HijackThis