View Single Post
  #10 (permalink)  
Old 15 Jul 08, 05:50 AM
AK3D AK3D is offline
Fanatic Member
 
Join Date: May 2007
Location: Ahmedabad, India
Posts: 289
AK3D is very Honorable AK3D is very Honorable AK3D is very Honorable AK3D is very Honorable
Default Re: Help me get rid of this irritating virus

O3 - Toolbar: sqvgnrpx - {F37B3BD0-55F4-4087-A42A-E6AAEBBF06B4} - C:\WINDOWS\sqvgnrpx.dll
O4 - HKLM\..\Run: [38482925] rundll32.exe "C:\WINDOWS\system32\kpvgxxfr.dll",b
O21 - SSODL: fsrpknov - {758E5146-22D4-418D-9EBB-1C28B688BD80} - C:\WINDOWS\fsrpknov.dll
O21 - SSODL: fdxbameg - {81FD837B-45A4-4DDE-896C-6BFC5AF8B5EC} - C:\WINDOWS\fdxbameg.dll

You have been infected by a couple trojans. I suggest you first -
RENAME the files above (not the rundll32.exe).
Run the hijackthis scan and remove these entries from the registry.
Reboot in safe mode, and delete these files (or shift them to another location).
Restart - run hijackthis again, you should be rid of the trojan.

Keep in mind, if you are using an 'open' computer i.e. without a firewall, you will definitely be infected again.
I suggest you download Comodo Firewall, and Avira Antivirus, and you should be safe.

Edit : Very likely you have the TR/Vundo trojan. use these instructions to remove it.
TR/Vundo.Gen (Adware Virtumondo) - HijackThis.de Support Board

VundoFix by Atribune - a tool specifically to remove the vundo infection.

Last edited by AK3D; 15 Jul 08 at 06:42 AM. Reason: Addition
Reply With Quote