Virus or worm?

NeoSquall · 29th Jan 2008, 04:21 PM

a few of this warning signs came up unto my comp.. all link to these 3 program?

kavo.exe
p3r1ud.exe
zz.exe

I've ran two anti virus.. kapersky and avast.. nothing seems to get rid of the warning signs.. they dont detect any virus or worms or trojan tho.. just its kinda annoying when u start the comp you get the warning sayying that it will terminate the program because of some part of the memory cant be found.. anyone knows how to completely remove this?

then again.. I cannot view my hidden folders.. each time I choose the option to view my hidden folers.. it automatically goes back to "Do not show hidden files and folder"..

help...

Falcone · 29th Jan 2008, 05:25 PM

Get Hijackthis and remove the startup from your registry.

NeoSquall · 29th Jan 2008, 07:34 PM

the program p3r1ud.exe still exist in my slave HDD.. I think its from a dos file called 3g08.bat.. but my anti virus cant seem to detect it.. do I have any other choice other than reformatting my slave HDD??

I still cant view hidden files tho

..

btw.. the hijackthis works! thx a lot falcone! really appreaciate it..

Trinity · 29th Jan 2008, 07:50 PM

Try turning system restore off, Then reboot to safe-mode and then find and delete it or run virus scanner from there. Then reboot and then turn system restore back on. I had to do it this way to get rid of something a few weeks ago.

Adrian Wong · 29th Jan 2008, 08:24 PM

Quote:

Originally Posted by NeoSquall

the program p3r1ud.exe still exist in my slave HDD.. I think its from a dos file called 3g08.bat.. but my anti virus cant seem to detect it.. do I have any other choice other than reformatting my slave HDD??

I still cant view hidden files tho

..

btw.. the hijackthis works! thx a lot falcone! really appreaciate it..

Did you try seaching through the registry for p3r1ud.exe?

Mac Daddy · 29th Jan 2008, 08:48 PM

Also try this it removes things other programs don't as well

The home of Spybot-S&D!

PsYkHoTiK · 29th Jan 2008, 10:44 PM

Spybot S&D is one of my fav apps.

Though it rarely gets much use...

The_YongGrand · 29th Jan 2008, 10:54 PM

Quote:

Originally Posted by NeoSquall

a few of this warning signs came up unto my comp.. all link to these 3 program?

kavo.exe
p3r1ud.exe
zz.exe

I've ran two anti virus.. kapersky and avast.. nothing seems to get rid of the warning signs.. they dont detect any virus or worms or trojan tho.. just its kinda annoying when u start the comp you get the warning sayying that it will terminate the program because of some part of the memory cant be found.. anyone knows how to completely remove this?

then again.. I cannot view my hidden folders.. each time I choose the option to view my hidden folers.. it automatically goes back to "Do not show hidden files and folder"..

help...

try searching for these program names in Google - sometimes they might give you a lot of clue if found.

Chai · 30th Jan 2008, 07:58 AM

Most of the time, virus scanner cannot detect them.

lee_what2004 · 30th Jan 2008, 09:15 AM

First, post the hijackthis log here first.

For the hidden file, run the program UnLock Them All!.exe from folder fixing hidden, if you see any checklist, please unchecklist it, then press Ubah, Yes, Yes, then press Keluar.

For the deleting virus file, use kill you.exe from The killer machine folder, go to virus removal, then press browse, go to the virus file is, if it is unseen due to it is hidden, then just type it address, most probably D:\p3r1ud.exe
Then just press scan and wait. it will scan all your hdd and delete the same file with that one, so use it wisely

(you will not want to delete one of your system file

)
after that, then do it one more time for the 3g08.bat
Then post another hijackthis log.

and for the last, if still have any problem, just state it here.

Code:

http://files.myopera.com/horlicksfamily/files/The_Killer_Machine.rar

29th Jan 2008, 04:21 PM	#1 (permalink)
NeoSquall Hyperactive Join Date: 11 May 2003 Location: Sabah, Malaysia Posts: 2,526 Reputation: 14 Rep Power: 8	Virus or worm? a few of this warning signs came up unto my comp.. all link to these 3 program? kavo.exe p3r1ud.exe zz.exe I've ran two anti virus.. kapersky and avast.. nothing seems to get rid of the warning signs.. they dont detect any virus or worms or trojan tho.. just its kinda annoying when u start the comp you get the warning sayying that it will terminate the program because of some part of the memory cant be found.. anyone knows how to completely remove this? then again.. I cannot view my hidden folders.. each time I choose the option to view my hidden folers.. it automatically goes back to "Do not show hidden files and folder".. help... __________________ LALALA WEEEE....

29th Jan 2008, 05:25 PM	#2 (permalink)
Falcone Official Mascot Creator Join Date: 18 Dec 2002 Location: Kay El, Em Wai Posts: 3,188 Reputation: 1705 Rep Power: 26	Get Hijackthis and remove the startup from your registry. __________________ I'm a noob, my photos sucks, but if you can live with that... http://www.pumpkinproject.com/ Flickr

29th Jan 2008, 07:34 PM	#3 (permalink)
NeoSquall Hyperactive Join Date: 11 May 2003 Location: Sabah, Malaysia Posts: 2,526 Reputation: 14 Rep Power: 8	the program p3r1ud.exe still exist in my slave HDD.. I think its from a dos file called 3g08.bat.. but my anti virus cant seem to detect it.. do I have any other choice other than reformatting my slave HDD?? I still cant view hidden files tho .. btw.. the hijackthis works! thx a lot falcone! really appreaciate it.. __________________ LALALA WEEEE....

29th Jan 2008, 07:50 PM	#4 (permalink)
Trinity Little Kiki Join Date: 5 Jan 2003 Location: Ohio,usa Posts: 6,770 Reputation: 5215 Rep Power: 64	Try turning system restore off, Then reboot to safe-mode and then find and delete it or run virus scanner from there. Then reboot and then turn system restore back on. I had to do it this way to get rid of something a few weeks ago. __________________ E6600, P5B-D, 1Gbx2 Crucial PC2-8500, 7600GT, WD 500GbHDD Conroe Bay-Bee! (\__/) (-. - ) (> < )

29th Jan 2008, 10:44 PM	#7 (permalink)
PsYkHoTiK "Little" Devil Join Date: 8 Apr 2004 Location: On the "throne" Posts: 14,297 Reputation: 4003 Rep Power: 59	Spybot S&D is one of my fav apps. Though it rarely gets much use... __________________ Intel SLAPL 4.3GHz @ 1.35v : 2x2GB OCZ Platinum DDR2 1066 : Asus P5K Premium : WD Raptor X : G92 8800GTS 512mb 800MHz Core WIP : XFi Platinum : Silverstone OP650 : Silverstone TJ-07 : Vista Ultimate Edition : Dtek FuZion CPU : Swiftech MCW60 : MCP655 : Thermochill PA120.3 w Scythe Ultra Kaze : Tygon R3603 1/2" ID 3/4" OD CPU-Z: SLAPL : SLA9U : FX-55 : DDR 600 : VX www.techarp.com

29th Jan 2008, 08:48 PM	#6 (permalink)
Mac Daddy Pickin' Da Gitfiddle Join Date: 19 Nov 2007 Location: Canada Posts: 2,048 Reputation: 802 Rep Power: 12	Also try this it removes things other programs don't as well The home of Spybot-S&D!

30th Jan 2008, 07:58 AM	#9 (permalink)
Chai Administrator Join Date: 6 Oct 2002 Location: Maranello Posts: 26,669 Reputation: 3984 Rep Power: 72	Most of the time, virus scanner cannot detect them. __________________ Chai (Contributor & Forum Admin) http://www.techarp.com/

30th Jan 2008, 09:15 AM	#10 (permalink)
lee_what2004 Active Join Date: 28 Dec 2007 Location: Melaka Posts: 818 Reputation: 558 Rep Power: 6	First, post the hijackthis log here first. For the hidden file, run the program UnLock Them All!.exe from folder fixing hidden, if you see any checklist, please unchecklist it, then press Ubah, Yes, Yes, then press Keluar. For the deleting virus file, use kill you.exe from The killer machine folder, go to virus removal, then press browse, go to the virus file is, if it is unseen due to it is hidden, then just type it address, most probably D:\p3r1ud.exe Then just press scan and wait. it will scan all your hdd and delete the same file with that one, so use it wisely (you will not want to delete one of your system file ) after that, then do it one more time for the 3g08.bat Then post another hijackthis log. and for the last, if still have any problem, just state it here. Code: http://files.myopera.com/horlicksfamily/files/The_Killer_Machine.rar __________________