Svvxpsro?

bbbco · May 4, 2005

Hey,

I am working on a computer that has this HiJack This what the log says in Safe Mode: (I have used this program enough to know that you only do that when things call for drastic measures). I have detected a virus (listed in bold below) in some scans that will not allow me to remove it because it is in the memory process. When I try and remove it through HiJack This, it still comes back on the very next scan, ergo it will not allow me to delete the file manually.

Logfile of HijackThis v1.99.0
Scan saved at 8:35:00 AM, on 5/4/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

O4 - HKLM\..\Run: [bAVJXk1x] C:\PROGRA~1\svvxpsro\ZcgDEkBN.exe

Any Ideas on how to remove this annoying threat? I have tried googling it, but to no avail.

Thanks!

bbbco

chaslang · May 4, 2005

Partial HJT this logs are not of too much use to us. Also, HJT logs should normally be obtained from normal boot mode. Safe will not typically show you everything you need to see.

However do not post a HijackThis log here until you run the READ ME FIRST steps and we ask for a log.

If you want to try to fix that O4 item, look in the process list for that process and kill it using HijackThis's process manager (by the way your HijackThis version is out of date). Then fix the O4 entry using HijackThis. Then immediately boot into safe mode and delete the file. (In this case it is probably the whole folder that should be deleted.)

Log in or Sign up

Svvxpsro?

bbbco Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member