1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Please help me: Trojan.Downloader.Zlob.YI

Discussion in 'Virus & Other Malware Removal' started by XavDol, Sep 25, 2006.

Thread Status:
Not open for further replies.
Advertisement
  1. XavDol

    XavDol Thread Starter

    Joined:
    Sep 25, 2006
    Messages:
    7
    Bit defender detects files infected by Trojan.Downloader.Zlob.YI
    Can you please help me to remove this thing?

    Thanks
     
  2. Sponsor

  3. MFDnNC

    MFDnNC

    Joined:
    Sep 7, 2004
    Messages:
    49,014
    Click here to download HJTsetup.exe:

    http://www.thespykiller.co.uk/forum/index.php?action=tpmod;dl=item5
    Scroll down to the download section

    Save HJTsetup.exe to your desktop.

    Double click on the HJTsetup.exe icon on your desktop.
    By default it will install to C:\Program Files\Hijack This.
    Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
    Put a check by Create a desktop icon then click Next again.
    Continue to follow the rest of the prompts from there.
    At the final dialogue box click Finish and it will launch Hijack This.
    Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
    Click Save to save the log file and then the log will open in notepad.
    Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
    Come back here to this thread and Paste the log in your next reply.
    DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
     
  4. XavDol

    XavDol Thread Starter

    Joined:
    Sep 25, 2006
    Messages:
    7
    Thank you.

    Here the HJT rapport:

    Logfile of HijackThis v1.99.1
    Scan saved at 02:00:28, on 26/09/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\oodag.exe
    C:\WINDOWS\system32\p2csvc.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
    C:\WINDOWS\ATK0100\HControl.exe
    C:\Program Files\ASUSTeK\ASUSDVD\PDVDServ.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Wireless Console 2\wcourier.exe
    C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
    C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
    C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
    C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe
    C:\Program Files\ASUS\ASUS Live Update\ALU.exe
    C:\WINDOWS\sm56hlpr.exe
    C:\Program Files\Softwin\BitDefender10\bdmcon.exe
    C:\Program Files\Softwin\BitDefender10\bdagent.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe
    C:\Program Files\Orange\Player Orange\Player Orange.exe
    C:\Program Files\Panasonic P2\Card\P2TaskTray.exe
    C:\Program Files\ASUS\Asus ChkMail\ChkMail.exe
    C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
    C:\WINDOWS\ATK0100\ATKOSD.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
    C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
    C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
    C:\Program Files\Softwin\BitDefender10\vsserv.exe
    C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE
    C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
    C:\Program Files\Hijackthis\HijackThis.exe

    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.asus.com
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\ASUSTeK\ASUSDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe
    O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
    O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
    O4 - HKLM\..\Run: [EOUApp] "C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe"
    O4 - HKLM\..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1
    O4 - HKLM\..\Run: [ASUS Live Update] C:\Program Files\ASUS\ASUS Live Update\ALU.exe
    O4 - HKLM\..\Run: [ABLKSR] C:\WINDOWS\ABLKSR\ABLKSR.exe
    O4 - HKLM\..\Run: [SMSERIAL] sm56hlpr.exe
    O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
    O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: Bluetooth Manager.lnk = ?
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Player Orange.lnk = C:\Program Files\Orange\Player Orange\Player Orange.exe
    O4 - Global Startup: P2 Card Manager.lnk = C:\Program Files\Panasonic P2\Card\P2TaskTray.exe
    O4 - Global Startup: ASUS ChkMail.lnk = C:\Program Files\ASUS\Asus ChkMail\ChkMail.exe
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
    O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
    O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
    O23 - Service: p2csvc - Matsushita Electric Industrial Co.,Ltd. - C:\WINDOWS\system32\p2csvc.exe
    O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)
    O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
     
  5. MFDnNC

    MFDnNC

    Joined:
    Sep 7, 2004
    Messages:
    49,014
    Where does BitDefender say it is???

    Please download SmitfraudFix (by S!Ri)
    Extract the content (a folder named SmitfraudFix) to your Desktop.

    Open the SmitfraudFix folder and double-click smitfraudfix.cmd
    Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present). We’ll get them next step.
    Please copy/paste the content of that report into your next reply.

    Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
    http://www.beyondlogic.org/consulting/proc...processutil.htm
     
  6. XavDol

    XavDol Thread Starter

    Joined:
    Sep 25, 2006
    Messages:
    7
    Bit Defender find numerous entries:

    Here you are Bit Defender rapport (sorry its in french but look at the end the "résumé" part)


    //-----------------------------------------------------------------
    //
    // ProduitBitDefender Antivirus Plus v10
    // Produit10.0
    //
    // Créé le: 25/09/2006 19:15:03
    //
    //-----------------------------------------------------------------


    Statistiques

    Chemin cible: C:\
    D:\
    Dossiers : 4266
    Fichiers : 234066
    Processus Mémoire analysés : 50
    Archives : 1665
    Fichiers renommés : 27137
    Virus trouvés : 1
    Fichiers infectés : 2
    Processus Mémoire infectés : 0
    Fichiers suspects : 1
    Alertes : 0
    Fichiers désinfectés : 0
    Fichiers effacés : 0
    Fichiers déplacés : 0
    Erreurs I/O : 10
    Temps d'analyse :=00:23:33
    Fichiers/seconde :165

    Statistiques Spywares

    Clés de registres analysées : 1697
    Clés de registres infectés : 0
    Cookies analysés : 46
    Cookies infectés : 0
    Fichiers spyware infectés : 0
    Menaces Spyware détectées : 0


    Définitions virus : 486532
    Plugins d'analyse : 15
    Plugins archives : 41
    Plug-ins décompression : 6
    Plug-ins messagerie : 6
    Plug-ins système : 5

    Options d'analyse

    Détection
    [X] Analyser le secteur de boot
    [X] Processus mémoire
    [ ] Analyser les archives
    [X] Analyser les fichiers enpaquetés
    [X] Analyser la messagerie

    Masque fichiers
    [X] Programmes
    [ ] Tous les fichiers
    [ ] Extensions définies par l'utilisateur:
    [ ] Exclure les extensions: ;

    Action

    Objets infectés
    [ ] Ignorer
    [X] Désinfecter
    [ ] Effacer
    [ ] Mettre en quarantaine
    [ ] Demander l'action

    Seconde action
    [ ] Ignorer
    [ ] Effacer
    [X] Mettre en quarantaine
    [ ] Demander l'action

    Options d'analyse
    [X] Activer les alertes
    [ ] Activer l'heuristique
    [ ] Afficher tous les fichiers dans le journal
    [X] Fichier journal: C:\Documents and Settings\All Users\Application Data\Bitdefender\Desktop\Profiles\Logs\full_scan\1159204503.log

    Options d'analyse Spyware

    [X] Analyse contre les risques non-viraux
    [ ] Ecarter de l'analyse les dialers et les applications
    [X] Clés de registres
    [X] Cookies


    Résumé:

    C:\Documents and Settings\Xavier Dolléans\Local Settings\Temp\lcszv6nh.exe=>(NSIS o)=>lzma_solid_nsis0006 Infecté: Trojan.Downloader.Zlob.YI
    C:\Documents and Settings\Xavier Dolléans\Local Settings\Temp\lcszv6nh.exe=>(NSIS o)=>lzma_solid_nsis0006 Désinfection impossible
    C:\Documents and Settings\Xavier Dolléans\Local Settings\Temp\lcszv6nh.exe=>(NSIS o)=>lzma_solid_nsis0006 Déplacement impossible
    C:\System Volume Information\_restore{E6D1F08B-E45A-4CC8-BB2F-0B94F09C0FED}\RP34\A0004253.exe=>(NSIS o)=>lzma_solid_nsis0006 Infecté: Trojan.Downloader.Zlob.YI
    C:\System Volume Information\_restore{E6D1F08B-E45A-4CC8-BB2F-0B94F09C0FED}\RP34\A0004253.exe=>(NSIS o)=>lzma_solid_nsis0006 Désinfection impossible
    C:\System Volume Information\_restore{E6D1F08B-E45A-4CC8-BB2F-0B94F09C0FED}\RP34\A0004253.exe=>(NSIS o)=>lzma_solid_nsis0006 Déplacement impossible


    Yesterday I had a problem with "VirusBurst". Its probably linked with?
    I solve the problem of "VirusBurst" in following automatic removal instruction find here

    http://www.bleepingcomputer.com/forums/topic63896.html

    Bit Defender find virus in
    C:\Program Files\MPVIDEOCODEC\

    Finally SmitFraudix rapport:


    SmitFraudFix v2.100

    Rapport fait à 2:11:49,56, 26/09/2006
    Executé à partir de C:\Documents and Settings\Xavier Doll‚ans\Bureau\SmitfraudFix
    OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
    Fix executé en mode normal

    »»»»»»»»»»»»»»»»»»»»»»»» C:\


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Xavier Doll‚ans


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Xavier Doll‚ans\Application Data


    »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\XAVIER~1\FAVORIS


    »»»»»»»»»»»»»»»»»»»»»»»» Bureau


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

    C:\Program Files\MPVIDEOCODEC\ PRESENT !
    C:\Program Files\vb\ PRESENT !

    »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


    »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Ma page d'accueil"


    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll


    »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
    !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
    "AppInit_DLLs"="sockspy.dll"


    »»»»»»»»»»»»»»»»»»»»»»»» pe386-msguard-lzx32


    »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


    »»»»»»»»»»»»»»»»»»»»»»»» Fin

    thanks for your help
     
  7. MFDnNC

    MFDnNC

    Joined:
    Sep 7, 2004
    Messages:
    49,014
    DownLoad EasyCleaner http://www.majorgeeks.com/download414.html

    Use the clear files and Unnecessary files buttons – I do not recommend
    using the Duplicates files button
    as many dupes are there on purpose.

    Not all files will delete – that is normal.

    In the unnecessary button I check the top 4 entries
    ==============
    Turn off restore points, boot, turn them back on – here’s how

    XP
    http://service1.symantec.com/SUPPOR...2001111912274039?OpenDocument&src=sec_doc_nam
    =============
    Now see if you have Zlob
     
  8. XavDol

    XavDol Thread Starter

    Joined:
    Sep 25, 2006
    Messages:
    7
    ok, I will try for this

    Bit Defender find other things,
    file infected by Trojan.Downloader.Zlob.YHA and Adware.Vurst.A
    Seems to be removed into quarentine.

    What can I do?
     
  9. MFDnNC

    MFDnNC

    Joined:
    Sep 7, 2004
    Messages:
    49,014
    If they are in Seems to be removed into quarentine. then they have been remove - empty the
    quarentine
     
  10. XavDol

    XavDol Thread Starter

    Joined:
    Sep 25, 2006
    Messages:
    7
    I don't understand: easycleaner can delete this Trojan?

    EasyCleaner found 4030 file unnecessary,do I have to erase everything?
     
  11. MFDnNC

    MFDnNC

    Joined:
    Sep 7, 2004
    Messages:
    49,014
    yes and do the restore points thing and then you can see if it is still there

    EasyClearner is very safe and removes junk from your system

    Empty the recycle bin afterwards and do a defrag
     
  12. XavDol

    XavDol Thread Starter

    Joined:
    Sep 25, 2006
    Messages:
    7
    Ok bit defender find one entrie:

    here the rapport



    Statistiques

    Chemin cible: C:\
    D:\
    Dossiers : 4045
    Fichiers : 190496
    Processus Mémoire analysés : 27
    Archives : 1067
    Fichiers renommés : 23629
    Virus trouvés : 1
    Fichiers infectés : 1
    Processus Mémoire infectés : 0
    Fichiers suspects : 0
    Alertes : 0
    Fichiers désinfectés : 0
    Fichiers effacés : 0
    Fichiers déplacés : 0
    Erreurs I/O : 10
    Temps d'analyse :=00:16:30
    Fichiers/seconde :192

    Statistiques Spywares

    Clés de registres analysées : 1689
    Clés de registres infectés : 0
    Cookies analysés : 43
    Cookies infectés : 0
    Fichiers spyware infectés : 0
    Menaces Spyware détectées : 0


    Définitions virus : 28961
    Plugins d'analyse : 15
    Plugins archives : 41
    Plug-ins décompression : 6
    Plug-ins messagerie : 6
    Plug-ins système : 5

    Options d'analyse

    Détection
    [X] Analyser le secteur de boot
    [X] Processus mémoire
    [ ] Analyser les archives
    [X] Analyser les fichiers enpaquetés
    [X] Analyser la messagerie

    Masque fichiers
    [X] Programmes
    [ ] Tous les fichiers
    [ ] Extensions définies par l'utilisateur:
    [ ] Exclure les extensions: ;

    Action

    Objets infectés
    [ ] Ignorer
    [X] Désinfecter
    [ ] Effacer
    [ ] Mettre en quarantaine
    [ ] Demander l'action

    Seconde action
    [ ] Ignorer
    [ ] Effacer
    [X] Mettre en quarantaine
    [ ] Demander l'action

    Options d'analyse
    [X] Activer les alertes
    [ ] Activer l'heuristique
    [ ] Afficher tous les fichiers dans le journal
    [X] Fichier journal: C:\Documents and Settings\All Users\Application Data\Bitdefender\Desktop\Profiles\Logs\full_scan\1159233000.log

    Options d'analyse Spyware

    [X] Analyse contre les risques non-viraux
    [ ] Ecarter de l'analyse les dialers et les applications
    [X] Clés de registres
    [X] Cookies


    Résumé:

    C:\Documents and Settings\Xavier Dolléans\Local Settings\Temp\lcszv6nh.exe=>(NSIS o)=>lzma_solid_nsis0006 Infecté: Trojan.Downloader.Zlob.YI
    C:\Documents and Settings\Xavier Dolléans\Local Settings\Temp\lcszv6nh.exe=>(NSIS o)=>lzma_solid_nsis0006 Désinfection impossible
    C:\Documents and Settings\Xavier Dolléans\Local Settings\Temp\lcszv6nh.exe=>(NSIS o)=>lzma_solid_nsis0006 Déplacement impossible
     
  13. MFDnNC

    MFDnNC

    Joined:
    Sep 7, 2004
    Messages:
    49,014
    delete this

    C:\Documents and Settings\Xavier Dolléans\Local Settings\Temp\lcszv6nh.exe
     
  14. XavDol

    XavDol Thread Starter

    Joined:
    Sep 25, 2006
    Messages:
    7
    Sorry I can't! A box open and says "impossible to delete Icszv6nh.exe: impossible to delete from the file or the disk source"
     
  15. MFDnNC

    MFDnNC

    Joined:
    Sep 7, 2004
    Messages:
    49,014
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/504347