Hello, I noticed these EXEs on my computer a few weeks ago and only two days ago did I start checking it out because it began to spread to all my USB drives.

I searched my computer for both of these files and I found that both of these exes existed in my windows/prefetch file. I deleted phim nguoi lon.exe first and rebooted with no trouble, but the file was still reappearing on my USB drives so I deleted secret.exe and then rebooted and now I am stuck in a log-on log-off loop. I started the computer in safe mode and after making a registry backup I deleted the reg_cz values of phim nguoi lon.exe and secret.exe and tried to reboot. Same loop problem.

So my question is, what do I do to get this off of my computer and USB drives?

Thanks so much in advance!

Hi, please take a look at this.

Regards,
Adam

What do I do if I can't access my account to do those things? I can only get on via Safe Mode...

I'm not yet trained for this so I will let someone else take this over.

Good luck to you.

I suggest that you post all pertinent info re your situation at BleepingComputer.com - Am I infected What do I do - http://www.bleepingcomputer.com/forums/forum103.html

If you should do this, please read/follow all instructions posted there which are designed to maximize/facilitate a tentative solution to malware situations.

Louis

Now that your log is properly posted, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a HJT Team member, nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show it the log you already posted. Further, any modifications you make on your own may cause confusion for the helper assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.

From this point on the HJT Team should be the only members that you take advice from, until they have verified your log as clean.

Please be patient. It may take a while to get a response because the HJT Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the HJT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.

If after 5 days you still have received no response, then post a link to your HJT log in the thread titled "Haven't Had A Reply In Five Days?".

To avoid confusion, I am closing this topic.