vuvzpu.exe and nrna.exe

Discussion in 'Malware Help (A Specialist Will Reply)' started by JJlapres, Jun 21, 2005.

  1. JJlapres

    JJlapres Private E-2

    My computer is running a little slow and will not load some of my kids games. In addition, everytime I try to boot off, it gives me a message about a program not responding (doesn't say which one). When I ran Hijack This, two programs I can not remove
    vuvzpu.exe and nrna.exe.

    Jow do I get rid of these things?

    Thanks In advance,
    John
     
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    First, please follow ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    After doing ALL of the above if you still have a problem:


    http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

    http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

    http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

    http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

    http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting
     
  3. JJlapres

    JJlapres Private E-2

    Alright,

    Here is the HijackThis log File.
     

    Attached Files:

  4. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    1 - Please EXTRACT all files from Qoologic Tool to its own folder - C:\Program Files\QoologicFinder . Then, DoubleClick Find-Qoologic.bat to run the tool. It should produce a log - Please attach that with your next post!

    2 - Please EXTRACT all the files form RKFiles Tool to its own folder named C:\Program Files\RKTOOL. Then, Please boot to SAFE MODE and DoubleClick rkfiles.bat to run the tool. Let it run and then, when it finishes, look for a log at C:\Log.txt and please attach that log.


    Now come back here and post both logs as attachments.
     
  5. JJlapres

    JJlapres Private E-2

    BJ,

    Thanks for getting back to me. I spent most of the night and today bouncing around the net trying to find answers. I went through the AdAware, SPybot route. Then I went through the QooLogic, RKTool route that was suggested on another board to someone else in my situation. After doing all of this and running CCleaner and Killbox about 20 times, the files remained. The major problem was I could not use any of the external drives. The CDROM would not load programs and my USB memory stick was not recognized. So transferring file to the machine was a pain. I ended up loading AVG Free virus software, then cleaned it up with that (it found three trojan horses). I was able to run my CDRom after this and I loaded the updated version of Norton Antivirus. Then I ran QooLogic again and as it was running AVG found the files and cleaned them up. I have rebooted and the HJT log looks clean.

    Sorry for the long reply but it was a long road.

    Again thanks for your willingness to help.

    One question, the viruses got onto the laptop over a dial up line. I now have updated versions of AVG and Norton running and I also have Zone Alarms free Fire wall program running. Is there anything else I can do to prevent this from happening again.

    Again Thanks
    John
     
  6. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    JJlapres,

    You didnt get rid of this pest that easy, I'll assure you it will come back if you did get some of it. This is a new infection and is a pain to remove in some cases.

    To confirm go ahead and attach me the 2 logs from the tools and a fresh HJT log.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds