[SgtZach]

i don't know how i got it on my comp but i cant get it off i found an old thread about here by Google i did some things the mods said to do of the things like AIMFix here's that log i starred out my user name



BlockRemove(): Now checking for Block-Checker: .5
BlockRemove(): Block-Checker not found
IMNamesRemove(): Now checking for IMNames: .2
IMNamesRemove(): IM Names not found
CleanMstc(): mstc not found
C:\DOCUME~1\****\LOCALS~1\Temp\B.exe found, attempting to remove...
KillProcByName(): C:\DOCUME~1\****LOCALS~1\Temp\B.exe successfully terminated.
KillProcByName(): B.exe successfully terminated.
quarantine(): C:\DOCUME~1\***\LOCALS~1\Temp\B.exe could not be quarantined: The process cannot access the file because it is being used by another process., will attempt to remove on reboot
quarantine(): C:\DOCUME~1\***\LOCALS~1\Temp\B.exe set to quarantine on reboot
C:\DOCUME~1\****\LOCALS~1\Temp\c.exe found, attempting to remove...
quarantine(): C:\DOCUME~1\****\LOCALS~1\Temp\c.exe quarantined

[Tuvach]

If you just want to get rid of the B.exe file and you know where it is try useing Unlocker 1.8.7 Cedrick Collomb. -> http://ccollomb.free.fr/unlocker/

the unlocker add's its self to the Right click menu, Just find B.exe with windows search feature
1. Right click file -E.G - B.exe
2. From drop down menu select Unlocker
3. Choose the action you wish to perform - No action - Delete - Rename - Move
4. Once action selected click the OK button =)

Might be an idea to ask the security guys very nicely to look over your HJT logs, Just in case its a nasty virus =) Better to be sure then not know and be infected.

Hope that helps & Best of luck.
Tuvach

[Cookiegal]

The General Security forum is only for general questions regarding security software and things of that nature but not for actually removing malware as we have qualified helpers who are the only members who are authorized to assist with those matters. You can easily identify them as they have either a gold or blue shield beside their usernames. Please refer to this excerpt from the rules:

http://www.techguy.org/rules.html

[quote]Log Analysis/Malware Removal - In order to ensure that advice given to users is consistent and of the highest quality, those who wish to assist with security related matters must first graduate from one of the malware boot camp training universities or be approved by the administration as already being qualified. Those authorized to help with malware issues have a gold shield next to their name and authorized malware removal trainees have a blue shield next to their names. If you'd like to participate in a training program, please contact a Moderator or see this article.

I'm going to close this thread and ask you to repost in the Malware Removal & HijackThis Logs forum for the proper assistance.

[Cookiegal]

tuvach,

You are not qualified to assist with malware related issues. If you'd like to train, please contact me by e-mail (click on my username and select the option to email me from there) and I'll give you the necessary information.