Missing file

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi ive had a virus on my computer and now when i turn my computer on i get
this msg.

g://windows/system32/qyrumvu\csrcc.new.exe

its either missing or something can anyone tell me how to fix it
Thank you lots
Ivan
 
From: "Ivan" <[email protected]>

| Hi ive had a virus on my computer and now when i turn my computer on i get
| this msg.
|
| g://windows/system32/qyrumvu\csrcc.new.exe
|
| its either missing or something can anyone tell me how to fix it
| Thank you lots
| Ivan

Run MSCONFIG.EXE and find the StartUp item that loads the above. Disable it and then
reboot.

Then I suggest the following...


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
http://kixtart.org Kixtart is CareWare } 4 batch files, 6 Kixtart scripts, one Link
(.LNK) file, a PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE. It will
simplify the process of using; Sophos, Trend, Kaspersky and McAfee Anti Virus Command
Line Scanners to remove viruses, Trojans and various other malware.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

* * * Please report back your results * * *
 
Thank you for your help dave

Here is my Virus report that i done... im still missingthat file


--------------------------------------------------------------------------------
Virus Scan Results
--------------------------------------------------------------------------------




11/08/2005 18:13:19


Options:
/ADL /UNZIP /WINMEM /SUB /ANALYZE /PANALYZE /STREAMS /CLEAN /ALL /DEL
/PROGRAM /MIME /HTML "C:\AV-CLS\MCAFEE\SCANREPORT.HTML"

Scanning C: []
Scanning C:\*.*
C:\unzipped\Norton Personal Firewall 2005 Keygen\Norton Personal Firewall
2005 Keygen.rar\NORTON PERSONAL FIREWALL 2005 KEYGEN.EXE ... Found the
Keylog-SClog trojan !!!
The file or process has been deleted.

Summary report on C:\*.*
File(s)
Total files: ........... 5285
Clean: ................. 5284
Possibly Infected: ..... 1
Cleaned: ............... 0
Deleted: ............... 1
Master Boot Record(s): ......... 1
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0
Scanning D: [MuSiK]
Scanning D:\*.*

Summary report on D:\*.*
File(s)
Total files: ........... 2574
Clean: ................. 2574
Possibly Infected: ..... 0
Cleaned: ............... 0
Master Boot Record(s): ......... 1
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0
Scanning E: [Ivan]
Scanning E:\*.*
E:\Dvd Stuff\Norton Personal Firewall 2005 Keygen.rar\NORTON PERSONAL
FIREWALL 2005 KEYGEN.EXE ... Found the Keylog-SClog trojan !!!
The file or process has been deleted.
E:\Dvd Stuff\Norton Personal Firewall 2005 Keygen.zip\NORTON PERSONAL
FIREWALL 2005 KEYGEN.RAR\NORTON PERSONAL FIREWALL 2005 KEYGEN.EXE ... Found
the Keylog-SClog trojan !!!
E:\Shared\Norton Personal Firewall 2005 Keygen.rar\NORTON PERSONAL FIREWALL
2005 KEYGEN.EXE ... Found the Keylog-SClog trojan !!!
The file or process has been deleted.
E:\Shared\Norton Personal Firewall 2005 Keygen.zip\NORTON PERSONAL FIREWALL
2005 KEYGEN.RAR\NORTON PERSONAL FIREWALL 2005 KEYGEN.EXE ... Found the
Keylog-SClog trojan !!!

Summary report on E:\*.*
File(s)
Total files: ........... 13635
Clean: ................. 13602
Possibly Infected: ..... 4
Cleaned: ............... 0
Deleted: ............... 2
Non-critical Error(s): 2
Master Boot Record(s): ......... 1
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0
Scanning F: []
Scanning F:\*.*

Summary report on F:\*.*
File(s)
Total files: ........... 61
Clean: ................. 59
Possibly Infected: ..... 0
Cleaned: ............... 0
Non-critical Error(s): 1
Master Boot Record(s): ......... 1
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0
Scanning G: [Xp]
Scanning G:\*.*
G:\Program Files\MSN Messenger\riched20.dll ... Found potentially unwanted
program Adware-MWS.
G:\Program Files\MyWebSearch\bar\1.bin\F3HTMLMU.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\1.bin\F3REPROX.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\1.bin\MWSOEPLG.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\1.bin\MWSOESTB.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\F3CJPEG.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\F3DTACTL.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\F3HISTSW.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\F3HTMLMU.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\F3POPSWT.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\F3PSSAVR.SCR ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\F3RESTUB.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\F3SCHMON.EXE ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\F3SCRCTR.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\F3WPHOOK.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\M3FFXTBR.JAR\CONTENTS.RDF ... Found
potentially unwanted program Adware-MWS.
G:\Program Files\MyWebSearch\bar\2.bin\M3HTML.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\M3IDLE.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\M3NTSTBR.JAR\CONTENTS.RDF ... Found
potentially unwanted program Adware-MWS.
G:\Program Files\MyWebSearch\bar\2.bin\M3OUTLCN.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\M3PLUGIN.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\M3SKIN.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\M3SKPLAY.EXE ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLL ... Found potentially
unwanted program Adware-MWS.
G:\Program Files\MyWebSearch\bar\2.bin\MWSOEMON.EXE ... Found potentially
unwanted program Adware-MWS.
G:\Program Files\MyWebSearch\bar\2.bin\MWSOEPLG.DLL ... Found potentially
unwanted program Adware-MWS.
G:\Program Files\MyWebSearch\bar\2.bin\MWSOESTB.DLL ... Found potentially
unwanted program Adware-MWS.
G:\Program Files\MyWebSearch\bar\2.bin\NPMYWEBS.DLL ... Found potentially
unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL ... Found
potentially unwanted program Adware-MWS.
The file or process has been deleted.
G:\Program Files\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLL ... Found
potentially unwanted program Adware-MWS.
G:\WINDOWS\Downloaded Program Files\f3initialsetup1.0.0.15.inf ... Found
potentially unwanted program Adware-MWS.
The file or process has been deleted.
G:\WINDOWS\system32\drivers\etc\hosts ... Found the Qhosts.apd trojan !!!
The virus has been removed from the file.
Checking for another virus in the file ...
G:\WINDOWS\system32\f3PSSavr.scr ... Found potentially unwanted program
Adware-MWS.
The file or process has been deleted.
G:\WINDOWS\system32\qyrumuu\csrss.exe ... Found the W32/Opanki.worm virus !!!
The file or process has been deleted.

A file(s) requires a reboot to complete the repair.
You are recommended to reboot the computer.

Summary report on G:\*.*
File(s)
Total files: ........... 120377
Clean: ................. 120331
Possibly Infected: ..... 1
Cleaned: ............... 1
Deleted: ............... 27
Non-critical Error(s): 2
Master Boot Record(s): ......... 1
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0


Time: 00:49.16



David H. Lipman said:
From: "Ivan" <[email protected]>

| Hi ive had a virus on my computer and now when i turn my computer on i get
| this msg.
|
| g://windows/system32/qyrumvu\csrcc.new.exe
|
| its either missing or something can anyone tell me how to fix it
| Thank you lots
| Ivan

Run MSCONFIG.EXE and find the StartUp item that loads the above. Disable it and then
reboot.

Then I suggest the following...


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

It is a self-extracting ZIP file that contains the Kixtart Script Interpreter {
http://kixtart.org Kixtart is CareWare } 4 batch files, 6 Kixtart scripts, one Link
(.LNK) file, a PDF instruction file and two utilities; UNZIP.EXE and WGET.EXE. It will
simplify the process of using; Sophos, Trend, Kaspersky and McAfee Anti Virus Command
Line Scanners to remove viruses, Trojans and various other malware.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

* * * Please report back your results * * *
Click to expand...
 
From: "Ivan" <[email protected]>

| Thank you for your help dave
|
| Here is my Virus report that i done... im still missingthat file
|

You were definitely infected with malware. Keylogging Trojans and adware.

Based upon this...

C:\unzipped\Norton Personal Firewall 2005 Keygen\Norton Personal Firewall
2005 Keygen.rar\NORTON PERSONAL FIREWALL 2005 KEYGEN.EXE ... Found the
Keylog-SClog trojan !!!
The file or process has been deleted

I must come to the conclusion that you downloaded WAREZ to avaoid paying for the software
and thus got the Keylogging Trojan !
That software weas NOT free. You paid by your loss of security and if you were infected
with this Trojan and wen to a banking site or a purchase site and entered personal data such
as login accout and passwords, credit card numbers and other such data, your personal
security has been compramised and you COULD be the target of identity theft or monetary
theft !!


Please download, install and update the following software...

Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/

SpyBot Search and Destroy v1.4
http://security.kolla.de/

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser Helper Objects
that may be on the PC.

BHODemon
http://www.definitivesolutions.com/bhodemon.htm
 
From: "Ivan" <[email protected]>

| Thank you for your help dave
|
| Here is my Virus report that i done... im still missingthat file
|

I forgot to mention...

You only ran McAfee. I suggest scanning with Sophos and Kaspersky.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Msn viruses?? 2
Missing Windows file, 2
missing a dll file 8
Windows 10 Activate windows now message 3
MISSING DVD BURNER 1
Please Help!! 2
System file missing 2
Nero 6 Problem 1

Back
Top