Hi Joe 5!
These are my Hijack and ewido reports, Can you have a look at them and see what I need to do in order to get rid of these nasty viruses.
Thank you very much for your time and kindness!
Note:I have SAS in my computer so the Hijack file is automatically saved in this format, I hope you can stil open it

Attached Files

	Scan report_20051211.txt.txt (8.0 KB, 2 views)
	hijackthis.log (7.0 KB, 2 views)

Howdy tungvu,
Now before you do anything make sure Joe or someone else looks at your logs just in case I miss somthing.. But looking at your ewido log..it looks clean as it just wiped out some tracking cookies.

What I am worried about are these entries in your hjt log

O4 - HKCU\..\Run: [Compaq32 Service Drivers] msconfig32.exe
O4 - HKCU\..\RunServices: [Compaq32 Service Drivers] msconfig32.exe

As shown below

http://www.sophos.com/virusinfo/anal...2sdbotadc.html

but again do not do anything till one of the mods check your log out..

Let's have a look if we can clean that up for you. :smiley:


Before fixing things with HijackThis Please Do the Following:



Show hidden files and folders:

For XP:

1. On the Tools menu in Windows Explorer, click Folder Options.
2. Click the View tab.
3. Under Hidden files and folders, click Show hidden files and folders.
4. If you see a warning message, click Yes.
5. Click Apply.
6. Click OK.

Disable System Restore to prevent re-infection.
(If you have/use it. You can turn it back on when youre PC is clean).

How to disable system restore:

WinXP.

1. Click the Start button.
2. Right-click My Computer, and then click Properties.
3. On the System Restore tab, check Turn off System Restore or Turn off System Restore on all drives.

Please download CCleaner



Then boot in safemode (hit f8 when booting up) and fix these with hjt:


And then run Ccleaner.


Now do a manuall search for "msconfig32.exe" and "msdirectx.sys" and delete all you find.
There will probebly be three of "msdirectx.sys".


Reboot and post a new hjt log please.

Hi Joe5!
I followed your instruction, but when I search the files( Start>Search>All Files and Folders>msconfig32.exe and also for msdirectx.sys) Is it manual search??
Windows can not find such files.
If it 's not the manual search you meant, please show me how to do it.
Once again thank a lot for your quick reply!

Attached Files

hijackthis2.log (5.5 KB, 1 views)

They're not running anymore , youre log is clean. :smiley:


But when searching for those files , did you also select "advanced options" and selected to also search for "hidden" , "system" and "sub" files/folders?

Hi Joe 5!
I did select these options, and window cannt find anything.
Do you know how i can make sure that I'm free from the virus.
An other question: I got Windows anti spyware Beta, Ad-adware SE personal, Norton Antivirus.
Do you think that it's neccessary to have ewido security suit and C cleaner in my laptop. Do they conflict each other?
Thank you for your help and your time