Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Iam In Trouble


  • This topic is locked This topic is locked
7 replies to this topic

#1 nav2684

nav2684

  • Members
  • 69 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:50 AM

Posted 28 October 2007 - 10:18 AM

hi friends,
I am in trouble and my computer is running very slow due to a SSVICHOSST.exe virus. It's location in c:\Windows. It has disabled the Task Manager and shows an error- "The Task Manager has been disabled by your Administrator". Even when I am trying to open regedit through run... it makes an error sound..."DONG"... and shows no error. I do not have an internet connection it came through my pen drive... hmmmmmm... now what should I do to eradicate this virus by root.... plz guys help me... I & my computer will be highly thankful to all of you....

Naveen

BC AdBot (Login to Remove)

 


#2 buddy215

buddy215

  • Moderator
  • 13,508 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Tennessee
  • Local time:07:20 PM

Posted 28 October 2007 - 05:23 PM

Download Hijack This to a CD or other medium. Download from CD to infected computer. Once on the infected computer, right click on the Hijack This.exe and choose rename. Name it something like "lastchancescan.com". Then double click on the .exe to run it. Post the log it produces in the Hijack This Forum. DO NOT post the log in this forum.
http://www.bleepingcomputer.com/files/hija...s-installer.php
“Every atom in your body came from a star that exploded and the atoms in your left hand probably came from a different star than your right hand. It really is the most poetic thing I know about physics...you are all stardust.”Lawrence M. Krauss
A 1792 U.S. penny, designed in part by Thomas Jefferson and George Washington, reads “Liberty Parent of Science & Industry.”

#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,087 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:20 PM

Posted 28 October 2007 - 05:58 PM

While your using another computer to download HijackThis, also download and run MsnCleaner.zip.

Transfer MsnCleaner.zip from your usb stick to the infected computer and save to you Desktop.
  • Extract (unzip) the file to your desktop. (click here if your not sure how to do this) but DO NOT use it yet.
  • Reboot your computer in "SAFE MODE" using the F8 method.
  • Double-click MsnCleaner.exe to run the tool.
  • Click the "Analyze" button.
  • A report will be created after the scan and will be saved to C:\MsnCleaner.txt.
  • If it finds an infection, click the "Deleted" button.
  • Reboot normally and post the contents of MsnCleaner.txt in your next reply.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#4 nav2684

nav2684
  • Topic Starter

  • Members
  • 69 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:50 AM

Posted 30 October 2007 - 09:58 AM

thnks guys...
I'll surely do the same as you described and will post the report here.... a BIG THANKS again...

Naveen

#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,087 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:20 PM

Posted 30 October 2007 - 10:21 AM

Good luck. Post back if you still need help.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#6 nav2684

nav2684
  • Topic Starter

  • Members
  • 69 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:India
  • Local time:06:50 AM

Posted 31 October 2007 - 09:28 AM

Hi Friends,

My computer is recuperating now and feeling great... it is fast and speedy again.... He & I are very thankful to you both GREAT GUYS....

REPORT GENERATED BY MSNCleaner…….

- Logfile MSNCleaner 1.4.3 by www.forospyware.com
- Created Logfile: 10/31/2007 on 12:45:51 PM
- Operative System: Windows XP
- Boot mode: Safe mode
_________________________________________

Detected files: 5
Deleted file: 5
Undeleted Files: 0

C:\autorun.inf <--- Deleted
C:\WINDOWS\ssvichosst.exe <--- Deleted
C:\WINDOWS\tasks\at1.job <--- Deleted
C:\WINDOWS\system32\autorun.ini <--- Deleted
C:\WINDOWS\system32\ssvichosst.exe <--- Deleted

Host file Restored

Though I have deleted the above all viruses but still my computer is showing an error on startup :-

Windows cannot find 'SSVICHOSST.exe'. Make sure you typed the name correctly,
and then try again. To search for a file, click the Start button, and then
click Search.


1. What should I do to fix this startup problem…....?
2. What should I do to enable my Task Manager and regedit command through run which was disabled by
SSVICHOSST.exe……
3. Folder Option from Tools menu has disappeared. What should I do to appear it…….?
4. Folder Option from Control Panel has disappeared. What should I do to appear it…….?


A BIG THANKS AGAIN……. GOD BLESS YOU


Naveen

#7 rookie147

rookie147

  • Members
  • 5,321 posts
  • OFFLINE
  •  
  • Local time:02:20 AM

Posted 31 October 2007 - 10:03 AM

I have taken your HijackThis log, so please use your other thread from now on.

If you are pleased with the service I have offered, you may like to consider making a donation. Posted Image
Posted Image


#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,087 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:20 PM

Posted 31 October 2007 - 10:53 AM

Thanks for letting me know rookie147.

nav2684, your log is posted here and you are already getting assistance.

From this point on the HJT Team should be the only members that you take advice from, until they have verified your log as clean.

To avoid confusion, I am closing this topic.

Thanks for your cooperation and good luck with your log.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users