[robin.alden]

Hi all, I've joined to reply to one of the discussions on the buritos.exe virus from adamextreme see this link.

He has quite a nasty virus and so do I. It is proving very difficult indeed to kill. Any way I cant reply at the moment so I'll ask the admin to up my priveledges and hopefully we can start a useful discussion on how to kill this virus.

Hope all is well

[tanker guy]

Hello,

I have joined this site also looking for a solution to the buritos.exe virus. I have seen where Adamextreme did go to multiple sites looking for a solution and both sites kicked him....

Have unsuccessfully tried the SDfix solution and am still searching for a fix.

So far have seen no real damage to the computer and is working normally but very inconvenient pop ups and has disable any updating to the antivirus or Spybot programs being used.

Any help is greatly appreciated.

[twinofangelize56]

Both of You to TSG!

[YellerPuma]

Hello,
Have you tried posting a HijackThis log in the Malware Removal room?
And don't post your problems at multiple forums. Like the other guy did.

[PCcruncher]

Originally Posted by robin.alden

He has quite a nasty virus and so do I. It is proving very difficult indeed to kill. Any way I cant reply at the moment so I'll ask the admin to up my privileges and hopefully we can start a useful discussion on how to kill this virus.

Hope all is well

If you need help, post a new thread in the malware room as yellerpuma recommended.

Please read this for instructions on how to do that.

You cannot have the ability to post in others logs for safety reasons and it keeps the original thread clean for the victim and helper.

Good luck!

Originally Posted by tanker guy

Hello,

I have joined this site also looking for a solution to the buritos.exe virus. I have seen where Adamextreme did go to multiple sites looking for a solution and both sites kicked him....

Have unsuccessfully tried the SDfix solution and am still searching for a fix.

So far have seen no real damage to the computer and is working normally but very inconvenient pop ups and has disable any updating to the antivirus or Spybot programs being used.

Any help is greatly appreciated.

If you need help, post a new thread in the malware room as yellerpuma recommended.

Please read this for instructions on how to do that.

Good luck!

[brushmaster1]

[SIR****TMG]

Welcome

[robin.alden]

Thanks! I have created a post as suggested here.

[PCcruncher]

Try renaming Hjt to safescanner (or anything it really doesn't matter) and see if it will run then. Edit your post and put the log in there.

Good luck!

[tanker guy]

After three days of working on this UPS (buritos.exe) virus, and multiple attempts and downloading various virus protection and Malware programs, have found the following program did remove my problem.

http://www.malwarebytes.org/mbam.php

Thanks for your replys and support! Glad to have this behind me!

[YellerPuma]

Glad you got helped!

[PCcruncher]

It would still be a good idea if someone could look at your Hijackthis log to see if there is anything lurking still.

Glad that one thing is gone!

[wordsmith]

Welcome

[robin.alden]

For anyone following this thread, I have added a HijackThis log to my buritos.exe thread (as per PCcruncher's request). The log can be found here...

[PCcruncher]

Hi robin, Was that the entire log? there is supposed to be a header at the top like this:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:28:57 PM, on 31/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal
Running processes:

Also, I would run Mbam to remove it before it spreads more. it does not benefit you to keep it on there

Only qualified helpers can help in the malware room, I am in training, but as of yet am unable to help you fully. Please be patient and Good Luck!