Forum     

Go Back   Digit Technology Discussion Forum > Software > Software Q&A
Register FAQ Calendar Mark Forums Read

Software Q&A Having trouble with software? Find solutions here

Closed Thread
 
LinkBack Thread Tools Display Modes
Old 19-09-2009, 07:03 AM   #1 (permalink)
Right Off the Assembly Line
 
Join Date: Apr 2004
Location: surat
Posts: 47
Default Virus Identified.Packed Hidden

hi friends
my pc is infected with virus.i m using windows xp(sp3) as my OS.
antivirus is AVG FREE EDITION.
avg has detected Virus Identified.Packed Hidden


\\?\globalroot\systemroot\system32\gasfkydqxqnku.d ll
c:\windows\explorer.exe(1532)

after removing above threat from virus vault,virus reappears in scanning.
plz help
Thanks in advance
ashishkamat is offline  
Advertisements. Register and be a member of the community to get rid of them.
Advertisement

Old 19-09-2009, 11:46 AM   #2 (permalink)
Crowman
 
Krow's Avatar
 
Join Date: Mar 2009
Location: New Delhi
Posts: 3,782
Default Re: Virus Identified.Packed Hidden

You need a format of you OS drive. Either do that or boot in safe mode and locate the infected files and delete them manually. After this, start>run>msconfig>startup tab and over there remove the entries which are similar to the infected file.
__________________
Like a post? Use the reputation button.
Abusive, offtopic post? Use the report post button.
Read before messaging any moderator for any query: FAQ + answers for new members
Read all the sticky threads before asking any type of query. Most basic questions are answered in those.

Ignorance of FORUM RULES is no defence.
Krow is offline  
Old 19-09-2009, 01:41 PM   #3 (permalink)
Human Spambot
 
swatkat's Avatar
 
Join Date: Mar 2004
Location: India
Posts: 2,033
Default Re: Virus Identified.Packed Hidden

Quote:
Originally Posted by ashishkamat View Post
hi friends
my pc is infected with virus.i m using windows xp(sp3) as my OS.
antivirus is AVG FREE EDITION.
avg has detected Virus Identified.Packed Hidden


\\?\globalroot\systemroot\system32\gasfkydqxqnku.d ll
c:\windows\explorer.exe(1532)

after removing above threat from virus vault,virus reappears in scanning.
plz help
Thanks in advance
Download Malwarebytes Anti-Malware from here:
http://www.malwarebytes.org/mbam.php
Boot into safe mode and run full system scan in Malwarebytes Anti-Malware. Post back the scan results.
__________________
http://swatrant.blogspot.com/
swatkat is offline  
Old 21-09-2009, 07:12 PM   #4 (permalink)
Right Off the Assembly Line
 
Join Date: Apr 2004
Location: surat
Posts: 47
Default Re: Virus Identified.Packed Hidden

friends
its root kit virus..its not getting deleted
thz
ashish
ashishkamat is offline  
Old 21-09-2009, 08:50 PM   #5 (permalink)
Human Spambot
 
swatkat's Avatar
 
Join Date: Mar 2004
Location: India
Posts: 2,033
Default Re: Virus Identified.Packed Hidden

Yes, it's a rootkit. We need to use some anti-rootkit tools. Download SysProt AntiRootkit from here:
http://sites.google.com/site/sysprotantirootkit/
Extract the contents of ZIP archive and then run SysProt.exe. Click on "Log" tab and then select these checkboxes:
Process
Kernel Modules
SSDT
Kernel Hooks
IRP Hooks
Hidden Files
After this, click "Create Log" button. It would take some time to scan and generate a log file. Upload the log file here, or copy-paste its contents here.
__________________
http://swatrant.blogspot.com/
swatkat is offline  
Closed Thread

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +5.5. The time now is 06:37 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.

Search Engine Optimization by vBSEO 3.3.2