Viruses???

**virusinfected** · #1 31st Jul 2007, 00:04

not sure if this is where to put this but i have/had a thing come up on my desktop today that says "kcuf(term involving sex)**.exe. what is it and how do i get rid of it...atm it has simply been right clicked on-sent to recycle bin- and emptied...but im sure thats not enough

**put there as i do not no what can be stated or said on these forums

**evilfantasy** · #2 31st Jul 2007, 01:03

Quote:

**put there as i do not no what can be stated or said on these forums

Some language considered un-acceptable may need to be displayed when identifying what you have become infected with. Some spyware/virus have specific tools for removal and the more info. we have the better. But for now.....
)Have you ran any anti-spyware programs to locate and remove anything?
http://www.thecomputerforums.co.uk/category5.html
)You may want to run HijackThis and post a log so we can see what is running on your computer.
http://www.trendsecure.com/portal/en...hijackthis.php

**virusinfected** · #3 31st Jul 2007, 01:18

ok well all i know is that i have AVG free and Webroots Spysweeper. i have been coming accross things such as *****.exe, trojan horses generic 4, 5, and downloader 4

**evilfantasy** · #4 31st Jul 2007, 01:26

Download HijackThis . http://www.trendsecure.com/portal/en...hijackthis.php
Once you have it downloaded install/save it to it's own folder.
For example C:\program files\hijackthis
Once installed open the program and select Do a system scan and save logfile.
Copy and paste the log in your next post.

**virusinfected** · #5 31st Jul 2007, 01:27

i assume its a safe program

**evilfantasy** · #6 31st Jul 2007, 01:31

You can run a virus scan and see if it picks it finds anything to delete.
You can do the same with spysweeper.
Also you can check your add/remove programs and see if anything has installed. Uninstall anything you know shouldn't be there.
Again names will be helpful, some spyware/virus has specific removal procedures so names are very important.

**virusinfected** · #7 31st Jul 2007, 01:37

not sure if this is it...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:38:04 PM, on 7/31/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\VIAudioi\SBADeck\ADeck.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\System32\atwtusb.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\cadix\screen saver\cssCtrl.exe
C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
C:\Program Files\Microsoft Office\Office\OSA.EXE
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\msrr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\PowerArchiver\POWERARC.EXE
C:\DOCUME~1\Robert\LOCALS~1\Temp\HijackThis.exe

O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [SlowDownCPU]

**evilfantasy** · #8 31st Jul 2007, 01:43

I think the log was too long for one post.
Save the log as a .txt file.
In the next post click Go Advanced.
Scroll down to manage attachments and add the log as an attachment.

**virusinfected** · #9 31st Jul 2007, 01:54

ok..i think

**virusinfected** · #10 31st Jul 2007, 02:10

that it?????