Cum scot virusul ANTIVIRUS XP 2008?

Deci acum o ora sa zicem mi sa activat iar virusul,si iar aveam restrictie la net. Nu stiu sigur daca este antivirus xp 2008 ca nu imi mai apare nimic de genu .. doar am restrictie la net !

Deci am dat clean cu SmitFraudFix  si mi-a dat urmatorul logo:

----------------------------------------------------------------------------
SmitFraudFix v2.388

Scan done at 20:32:22,67, 05.01.2009
Run from C:\Documents and Settings\ANDREI\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix run in safe mode

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll

»»»»»»»»»»»»»»»»»»»»»»»» Killing process


»»»»»»»»»»»»»»»»»»»»»»»» hosts


127.0.0.1       localhost

»»»»»»»»»»»»»»»»»»»»»»»» VACFix

VACFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

S!Ri's WS2Fix: LSP not Found.


»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

GenericRenosFix by S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

C:\WINDOWS\system32\x.exe Deleted

»»»»»»»»»»»»»»»»»»»»»»»» IEDFix

IEDFix
Credits: Malware Analysis & Diagnostic
Code: S!Ri



»»»»»»»»»»»»»»»»»»»»»»»» Agent.OMZ.Fix

Agent.OMZ.Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» 404Fix

404Fix
Credits: Malware Analysis & Diagnostic
Code: S!Ri


»»»»»»»»»»»»»»»»»»»»»»»» RK


»»»»»»»»»»»»»»»»»»»»»»»» DNS



»»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, following keys are not inevitably infected!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

Registry Cleaning done.

»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler After SmitFraudFix
!!!Attention, following keys are not inevitably infected!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» End

--------------------------------------------------------------------------------------------


Dupa asta tot in safe mod am dat scanare si cu Malwarebytes' Anti-Malware dupa care si cu SUPERAntiSpyware (care din pacate nu mi-a mai gasit nimic)
----------------------------------------------------------------------------
Logoul de la Anti-Malware este :

Malwarebytes' Anti-Malware 1.31
Database version: 1612
Windows 5.1.2600 Service Pack 2

05.01.2009 21:29:56
mbam-log-2009-01-05 (21-29-56).txt

Scan type: Full Scan (C:\|D:\|G:\|H:\|)
Objects scanned: 89864
Time elapsed: 51 minute(s), 47 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VMwareService (Backdoor.Bot) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\vmwareservice (Backdoor.Bot) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system\VMwareService.exe (Backdoor.Bot) -> Quarantined and deleted successfully.

------------------------------------------------------------------


Ce este acest VMwareService.exe ? asta se activeaza de fiecare data .. :| numai de el dau,cred ca el imi face restrictie la internet

Edited by Narcis38, 05 January 2009 - 21:47.

Un virus backdoor.
  Descarca de Aici  A-squared varianta a-squared Free 4.0,faci update la el,scoti internetu si deep scan,apoi bifezi dupa scanare toate elementele gasite si remove.
Este necesar sa revii dupa aceea cu logu acestuia pe care-l salvezi la sfarsitu scanarii.
  Sa ai system restore oprit.

dar acest VMwareService.exe imi face restrictia la net ?

PS:multumesc pentru program,acum il incerc

Quote

Probabil ca da. Ai cumva vre-un produs VMWare instalat ?
Si ca o recomandare - cand mai vrei sa scoti un virus, da disable la System Restore si ruleaza scanarile in SAFE MODE.

imi scapa faza cu disable la system restore .. de unde dau ?

Narcis38, on Jan 6 2009, 20:16, said:

http://forum.softped...howtopic=357453

Suna ciudat dar eu vreau sa imi instalez acest virus ... cei care au fost infectati cu el pot sa ma indrume si pe mine de unde l-au inhatat?

jonae, on Mar 8 2009, 15:24, said:

Asa ceva nu vei primi pe forum.

Am nu stiu cate versiuni, dar aici scoatem virusi, nu bagam in PC la useri

Edited by crysty2k5, 08 March 2009 - 17:17.