Posted 07 July 2006 - 11:48 AM
I'm rather new to this forum but not to computers,
in the last two weeks I found a new problem in my PC and I'd like to have some help with it.
I usually use HiJackThis (the log is clean), Adaware, Windows Defender, BlackICE, Jetico Firewall, I'm under a hw router/firewall and downloaded Trojan Hunter to try.
None of them solve my problem.
Here it is (Win2000 os).
I found a new service under services,
it's called SrvBog and the description is copied from some other service,
the service is connected to a new creater user called .\DrOod,
it is run automatically,
and point to "C:\Programmi\File comuni\Microsoft Shared\tVJ.exe"
I checked here, the exe file is hidden,
I unmaksed it but couldn't delete or move it,
EveryOne group have been setted to have no rights on it,
I took property by setting all rights to EveryOne and also have to go on Advanced to uncheck the "cypher content for data security" (sorry for the english, it's something like data, but my is in Italian).
I then went to the Connection Tab of the service and disabled the user/service for current Profile
Then at next boot I could delete the exe file.
And also deleted the user path under Documents and Settings
I couldn't anyway delete the service too.
I then go on for two days,
after that I noticed a huge amount of memory eated by Excel
I checked again,
and found the service was live again
also a new one was created,
this one is called WebCzo, is connected to user .\wuCNGczwowLZxfTLMI and point to "C:\Programmi\File comuni\System\IwZf.exe"
Ok, that' all for the momento,
I did a search on Internet but couldn't find anything related to them,
direclty scanning with Antivirus and Antispyware both in Normal Mode and in Safe Mode give no results, the exe files are not recognized neither as viruses nor as spyware.
Can someone help with it ?
Thanks in advance