Virus or worm?

NeoSquall · 29th Jan 2008, 04:21 PM

a few of this warning signs came up unto my comp.. all link to these 3 program?

kavo.exe
p3r1ud.exe
zz.exe

I've ran two anti virus.. kapersky and avast.. nothing seems to get rid of the warning signs.. they dont detect any virus or worms or trojan tho.. just its kinda annoying when u start the comp you get the warning sayying that it will terminate the program because of some part of the memory cant be found.. anyone knows how to completely remove this?

then again.. I cannot view my hidden folders.. each time I choose the option to view my hidden folers.. it automatically goes back to "Do not show hidden files and folder"..

help...

Falcone · 29th Jan 2008, 05:25 PM

Get Hijackthis and remove the startup from your registry.

NeoSquall · 29th Jan 2008, 07:34 PM

the program p3r1ud.exe still exist in my slave HDD.. I think its from a dos file called 3g08.bat.. but my anti virus cant seem to detect it.. do I have any other choice other than reformatting my slave HDD??

I still cant view hidden files tho

..

btw.. the hijackthis works! thx a lot falcone! really appreaciate it..

Trinity · 29th Jan 2008, 07:50 PM

Try turning system restore off, Then reboot to safe-mode and then find and delete it or run virus scanner from there. Then reboot and then turn system restore back on. I had to do it this way to get rid of something a few weeks ago.

Adrian Wong · 29th Jan 2008, 08:24 PM

Quote:

Originally Posted by NeoSquall

the program p3r1ud.exe still exist in my slave HDD.. I think its from a dos file called 3g08.bat.. but my anti virus cant seem to detect it.. do I have any other choice other than reformatting my slave HDD??

I still cant view hidden files tho

..

btw.. the hijackthis works! thx a lot falcone! really appreaciate it..

Did you try seaching through the registry for p3r1ud.exe?

Mac Daddy · 29th Jan 2008, 08:48 PM

Also try this it removes things other programs don't as well

The home of Spybot-S&D!

PsYkHoTiK · 29th Jan 2008, 10:44 PM

Spybot S&D is one of my fav apps.

Though it rarely gets much use...

The_YongGrand · 29th Jan 2008, 10:54 PM

Quote:

Originally Posted by NeoSquall

a few of this warning signs came up unto my comp.. all link to these 3 program?

kavo.exe
p3r1ud.exe
zz.exe

I've ran two anti virus.. kapersky and avast.. nothing seems to get rid of the warning signs.. they dont detect any virus or worms or trojan tho.. just its kinda annoying when u start the comp you get the warning sayying that it will terminate the program because of some part of the memory cant be found.. anyone knows how to completely remove this?

then again.. I cannot view my hidden folders.. each time I choose the option to view my hidden folers.. it automatically goes back to "Do not show hidden files and folder"..

help...

try searching for these program names in Google - sometimes they might give you a lot of clue if found.

Chai · 30th Jan 2008, 07:58 AM

Most of the time, virus scanner cannot detect them.

lee_what2004 · 30th Jan 2008, 09:15 AM

First, post the hijackthis log here first.

For the hidden file, run the program UnLock Them All!.exe from folder fixing hidden, if you see any checklist, please unchecklist it, then press Ubah, Yes, Yes, then press Keluar.

For the deleting virus file, use kill you.exe from The killer machine folder, go to virus removal, then press browse, go to the virus file is, if it is unseen due to it is hidden, then just type it address, most probably D:\p3r1ud.exe
Then just press scan and wait. it will scan all your hdd and delete the same file with that one, so use it wisely

(you will not want to delete one of your system file

)
after that, then do it one more time for the 3g08.bat
Then post another hijackthis log.

and for the last, if still have any problem, just state it here.

[code]http://files.myopera.com/horlicksfamily/files/The_Killer_Machine.rar[/code]

29th Jan 2008, 04:21 PM	#1 (permalink)
NeoSquall Hyperactive Join Date: 11 May 2003 Location: Sabah, Malaysia Posts: 2,537 Reputation: 14 Rep Power: 9	Virus or worm? a few of this warning signs came up unto my comp.. all link to these 3 program? kavo.exe p3r1ud.exe zz.exe I've ran two anti virus.. kapersky and avast.. nothing seems to get rid of the warning signs.. they dont detect any virus or worms or trojan tho.. just its kinda annoying when u start the comp you get the warning sayying that it will terminate the program because of some part of the memory cant be found.. anyone knows how to completely remove this? then again.. I cannot view my hidden folders.. each time I choose the option to view my hidden folers.. it automatically goes back to "Do not show hidden files and folder".. help... __________________ LALALA WEEEE....

29th Jan 2008, 05:25 PM	#2 (permalink)
Falcone Official Mascot Creator Join Date: 18 Dec 2002 Location: Shanghai, See En Posts: 3,371 Reputation: 1878 Rep Power: 29	Get Hijackthis and remove the startup from your registry. __________________ I'm a noob, my photos sucks, but if you can live with that... http://www.pumpkinproject.com/ Flickr

29th Jan 2008, 07:34 PM	#3 (permalink)
NeoSquall Hyperactive Join Date: 11 May 2003 Location: Sabah, Malaysia Posts: 2,537 Reputation: 14 Rep Power: 9	the program p3r1ud.exe still exist in my slave HDD.. I think its from a dos file called 3g08.bat.. but my anti virus cant seem to detect it.. do I have any other choice other than reformatting my slave HDD?? I still cant view hidden files tho .. btw.. the hijackthis works! thx a lot falcone! really appreaciate it.. __________________ LALALA WEEEE....

29th Jan 2008, 07:50 PM	#4 (permalink)
Trinity Little Kiki Join Date: 5 Jan 2003 Location: Ohio,usa Posts: 7,249 Reputation: 6033 Rep Power: 75	Try turning system restore off, Then reboot to safe-mode and then find and delete it or run virus scanner from there. Then reboot and then turn system restore back on. I had to do it this way to get rid of something a few weeks ago. __________________ (\__/) (-. - ) (> < )

29th Jan 2008, 10:44 PM	#7 (permalink)
PsYkHoTiK "Little" Devil Join Date: 8 Apr 2004 Location: On the "throne" Posts: 14,746 Reputation: 4681 Rep Power: 66	Spybot S&D is one of my fav apps. Though it rarely gets much use... __________________ Intel SLBEJ @ 4GHz : 3x2GB OCZ Platinum DDR3 1600 : Asus P6X58 Premium : WD RE3 250GB x2 RAID 0 : 3ware 9650SE-2LP : XFX Radeon 5850 : XFi Platinum : Silverstone OP650 : Silverstone TJ-07 : Swiftech Apogee XT : MCP655 : Thermochill PA120.3 w Scythe Ultra Kaze CPU-Z: SLBEJ : SLAPL : SLA9U : FX-55 : DDR 600 : VX www.techarp.com

29th Jan 2008, 08:48 PM	#6 (permalink)
Mac Daddy Pickin' Da Gitfiddle Join Date: 19 Nov 2007 Location: Canada Posts: 2,052 Reputation: 802 Rep Power: 13	Also try this it removes things other programs don't as well The home of Spybot-S&D!

30th Jan 2008, 07:58 AM	#9 (permalink)
Chai Administrator Join Date: 6 Oct 2002 Location: Maranello Posts: 28,124 Reputation: 4649 Rep Power: 82	Most of the time, virus scanner cannot detect them. __________________ Chai (Contributor & Forum Admin) http://www.techarp.com/

30th Jan 2008, 09:15 AM	#10 (permalink)
lee_what2004 Super Active Join Date: 28 Dec 2007 Location: Melaka Posts: 1,352 Reputation: 1149 Rep Power: 15	First, post the hijackthis log here first. For the hidden file, run the program UnLock Them All!.exe from folder fixing hidden, if you see any checklist, please unchecklist it, then press Ubah, Yes, Yes, then press Keluar. For the deleting virus file, use kill you.exe from The killer machine folder, go to virus removal, then press browse, go to the virus file is, if it is unseen due to it is hidden, then just type it address, most probably D:\p3r1ud.exe Then just press scan and wait. it will scan all your hdd and delete the same file with that one, so use it wisely (you will not want to delete one of your system file ) after that, then do it one more time for the 3g08.bat Then post another hijackthis log. and for the last, if still have any problem, just state it here. [code]http://files.myopera.com/horlicksfamily/files/The_Killer_Machine.rar[/code] __________________ Once a wise-man said : Chapter 1: Don't ever compare if you want to stay constant..... Chapter 2: Whatever you have done in the internet, you will never get away from it... Chapter 3:To be continued after I thought another one