C:\WINDOWS\system32\aikelyu.html --> knsa na biktima ani?! help!

[timmyduncan]

---

@dubioz.. puede na cla free?

please look at the source code of the aikelyu.html
then try to look for executables or registry keys in the source code....

kita ko na tanan source codes to registry to exe files... cannot be deleted.... jd...

[firebasefury]

try downloading spybot bai maybe it can help.

[leo_trams]

naka hide tingali na...i-unhide sa!..change file attributes.

[silent-kill]

suwayi dili did2 sa commandline.

suwayi pud scan for spyware "search and destroy"

[timmyduncan]

waaaaaa... daghan au mo suggest na spywares.... unsa jd pinaka nndut? ;D

[kim_gonz]

search and destroy ai... nice na.

[erwin_rommel]

waaaaaa... daghan au mo suggest na spywares.... unsa jd pinaka nndut? ;D

testingi tanan nga gi pang recommend. careful lang kay basin spyware pud ang imong ma install kay daghan au spyware nga mu ingon nga antispyware sila

[butitoy]

a visual basic scripted tojan .

here: http://www.castlecops.com/t197216-He...l_dll_vbs.html

running programs sample :
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:14:54 PM, on 8/9/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\System32\WScript.exe >>>>> virus running
C:\Program Files\Intel Audio Studio\IntelAudioStudio.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe >>>> useles antivirus
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Creative\Sync Manager Unicode\CTSyncU.exe
C:\PROGRA~1\Yahoo!\MESSEN~1\ymsgr_tray.exe
C:\Program Files\Intel\AMT\atchksrv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe >>> useless
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe >>> useless
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe >>>>useless
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Intel\AMT\LMS.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wscript.exe
C:\WINDOWS\system32\wscript.exe
C:\WINDOWS\system32\wscript.exe
C:\WINDOWS\system32\wscript.exe
C:\WINDOWS\system32\wscript.exe
C:\WINDOWS\system32\wscript.exe
C:\WINDOWS\system32\wscript.exe
C:\WINDOWS\system32\wscript.exe virus
C:\Program Files\Save\Save.exe
C:\WINDOWS\system32\wscript.exe >>> infected system32 with a ***.dll.vbs
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe >>>> useless
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe >>>> useless
C:\Documents and Settings\Joseph\Desktop\HiJackThis_v2.exe >>> this is the online trend micro seacher

[butitoy]

i use bitdefender10. i have a norton 2007.

both can kill it.

for best remedy: re format. after xp install - install a bitdefender or norton 2007

avg is dead. their prime time had already passed.
last year they're no1. now.. they're not even on the list of top5 anymore.

if di gyud nimo madaa ug ikaw ra ... 0906 235 9742

[timmyduncan]

really.... asa ko makakita sa mga top anti virus and spyware? para mamaili ko unsa i download...hehehe

anyways, havent tried bitdefender. tried norton morag makaphinay man sya sa performance sa imo PC.

try lang nya nako....