Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Computer virus, many reader_s.exe


  • This topic is locked This topic is locked
2 replies to this topic

#1 DemonicReaper

DemonicReaper

  • Members
  • 53 posts
  • OFFLINE
  •  
  • Local time:01:37 PM

Posted 30 March 2010 - 11:16 PM

Hello, just recently i got a bunch of viruses/malware/adware/spyware. At first i problems with the start nvatabus.sys, it would not let me boot up my pc. So i corrected the problem by copying a new "navatabus.sys" into the correct directory by using the xp install cd. This allowed me to boot up my oc, but know i am having other issues, such as being slow, limited access to sites on the internet, and ect. I have tried running several programs. I have used ccleaner, vundofix, truesword, and trojan remover successfully. Other programs i have tried to use are prevxcsi and spyware doctor, but both were useless because i could not access the database needed to update/run the program. I have tried running combofix, but the program comes up with a warning saying "Cannot run, not safe". The last program i tried using "superantispyware" would run the scan but come up with the blue screen of death. I have removed several infected files but, i know there is more. The main file reader_s.exe keeps coming up in scans and doesn't seem to be ever completely removed. I have run checks in both safemode and regular mode but, i cant seem to get rid of the problem. Any help would be greatly appreciated.

*** First problem i noticed were porn icons that randomly appeared on my desktop***

Edited by DemonicReaper, 31 March 2010 - 01:37 AM.
Moved from XP forum. ~BP


BC AdBot (Login to Remove)

 


#2 techextreme

techextreme

    Bleepin Tech


  • Members
  • 2,125 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Pittsburgh, PA
  • Local time:05:37 PM

Posted 31 March 2010 - 08:07 AM

From what information you have provided, reader_s.exe seems to be pointing to a polymorphic virus by the name of Virut. It is possible that this is incorrect but from your symptoms, and what you are describing I feel this is the most likely case.

Now, with that said, I'd like to get a look at any logs you may have pertaining to "reader_s.exe". This will help point you in the proper direction.
Techextreme

"Admire those who attempt great things, even though they fail."

-- Seneca

#3 Orange Blossom

Orange Blossom

    OBleepin Investigator


  • Moderator
  • 37,112 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:04:37 PM

Posted 31 March 2010 - 03:07 PM

It is indeed VIRUT. Please see the response to your other topic here: http://www.bleepingcomputer.com/forums/t/306100/computer-virus-many-reader-sexe/

This topic is now closed.

~ OB
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Internet Security, NoScript Firefox ext.


animinionsmalltext.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users