WiredWX Christian Hobby Weather Tools
Would you like to react to this message? Create an account in a few clicks or log in to continue.

WiredWX Christian Hobby Weather ToolsLog in

 


descriptionwin32.Agent. ODG virus in operating memory - Page 1 EmptyRe: win32.Agent. ODG virus in operating memory

more_horiz
Hello.
A few more leftovers need to be thrown out, but I want to see what's installed first.

  • Open HijackThis.
  • When Hijack This opens, click "Open the Misc Tools section"
  • Then select "Open Uninstall Manager"
  • Click on "Save List..." (generates uninstall_list.txt)
  • Click Save, copy and paste the results in your next post.

............................................................................................

Site Admin / Security Administrator

Virus Removal ~ OS Support ~ Have we helped you? Help us! ~ GeekChat
- Please PM me if I fail to respond within 24hrs.
win32.Agent. ODG virus in operating memory - Page 1 DXwU4
win32.Agent. ODG virus in operating memory - Page 1 VvYDg

descriptionwin32.Agent. ODG virus in operating memory - Page 1 EmptyRe: win32.Agent. ODG virus in operating memory

more_horiz
3 Mobile Broadband
ABBYY FineReader 5.0 Sprint Plus
Adobe Anchor Service CS3
Adobe Asset Services CS3
Adobe Bridge CS3
Adobe Bridge Start Meeting
Adobe Camera Raw 4.0
Adobe CMaps
Adobe Color Common Settings
Adobe Color EU Extra Settings
Adobe Color JA Extra Settings
Adobe Color NA Recommended Settings
Adobe Device Central CS3
Adobe ExtendScript Toolkit 2
Adobe Flash CS3
Adobe Flash CS3 Professional
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Flash Player 9 ActiveX
Adobe Flash Video Encoder
Adobe Help Viewer CS3
Adobe Linguistics CS3
Adobe PDF Library Files
Adobe Reader 8.1.2
Adobe Setup
Adobe Type Support
Adobe Update Manager CS3
Adobe Version Cue CS3 Client
Adobe WinSoft Linguistics Plugin
Agere Systems PCI Soft Modem
Audacity 1.2.6
BitComet 1.10
Camtasia Studio 6
CCleaner (remove only)
Chessmaster 10th Edition Demo
Choice Guard
Combat Arms
Compaq Connections
EPSON CardMonitor
EPSON Copy Utility
EPSON Printer Software
EPSON Scan
EPSON Smart Panel
ESPRX510 Reference Guide
ESPRX510 Software Guide
HDD Health v3.3 Beta
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 2.0 (KB922981)
Hotfix for Windows Internet Explorer 7 (KB947864)
HP Deskjet Preloaded Printer Drivers
HP Image Zone 3.5
HP Photo & Imaging 3.5 - HP Devices
HP PSC & OfficeJet 3.0
Image Resizer Powertoy for Windows XP
Internet Download Manager
Java 2 Runtime Environment, SE v1.4.2_03
Java(TM) 6 Update 10
KBD
LimeWire PRO 4.18.8
Macromedia Flash MX
Malwarebytes' Anti-Malware
Mavis Beacon Teaches Typing 10
Memories Disc Creator 2.0
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Encarta Encyclopedia Standard - WE 2004
Microsoft Expression Web
Microsoft Expression Web
Microsoft Expression Web MUI (English)
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Outlook Connector
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office Professional 2007
Microsoft Office Professional 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Small Business Connectivity Components
Microsoft Office Word MUI (English) 2007
Microsoft Silverlight
Microsoft SQL Server 2005
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft SQL Server 2005 Tools Express Edition
Microsoft SQL Server Native Client
Microsoft SQL Server Setup Support Files (English)
Microsoft SQL Server VSS Writer
Microsoft Text-to-Speech Engine 4.0 (English)
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Works 2004 Setup Launcher
Microsoft Works Suite Add-in for Microsoft Word
Mozilla Firefox (3.0.8)
MSXML 4.0 SP2 (KB936181)
MSXML 6.0 Parser
Multimedia Card Reader
Nero 7 Ultra Edition
NVIDIA Display Driver
NVIDIA Ethernet Driver
NVIDIA GART Driver
OGA Notifier 1.7.0105.35.0
Paint.NET v3.22
PC User PAL Framerate Fix 1.0
PC-Doctor for Windows
PDF Settings
PIF DESIGNER2.1
Power!Info Blackline Support for QTW
Power!Info More Tools
Power!Info Power!Video 2.1 for QTW
Power!Info Power!Video 2.1 for VFW
PS2
Python 2.2 combined Win32 extensions
Python 2.2.1
QuickTime Virtual Reality
RecordNow!
Recuva (remove only)
Registry Mechanic 8.0
SAMSUNG CDMA Modem Driver Set
SAMSUNG Mobile Composite Device Software
Samsung Mobile phone USB driver Software
SAMSUNG Mobile USB Modem 1.0 Software
SAMSUNG Mobile USB Modem Software
Samsung PC Studio
Samsung PC Studio 3 USB Driver Installer
Samsung Samples Installer
Security Update for Microsoft .NET Framework 2.0 (KB928365)
Snagit 9.1.1
Sothink SWF Decompiler
Spyware Doctor 6.0
SUPERAntiSpyware Professional
Total Video Converter 3.12 080330
Ultra Defragmenter
Unlocker 1.8.7
Update for Office 2007 (KB932080)
Update for Office 2007 (KB932080)
Update for Outlook 2007 Junk Email Filter (kb959634)
Urban Terror 4.1
VLC media player 0.9.8a
WCreator2
Windows Imaging Component
Windows Internet Explorer 7
Windows Internet Explorer 8
Windows Live installer
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows XP Service Pack 3
WinRAR archiver

descriptionwin32.Agent. ODG virus in operating memory - Page 1 EmptyRe: win32.Agent. ODG virus in operating memory

more_horiz
Hello.


I see that you are running BitComet and Limewire.
P2P(Peer to peer) applications are designed to help you easily share and distribute files between you and a group of people. But they can also be used to distribute malware, and thus are not considered safe.
The removal of these programs is optional, but highly recommended.

If BitComet and Limewire is not removed, then I won't help you.

Go to Start > Control Panel > Add/Remove Programs and remove the following programs.

  • BitComet 1.10
    Java 2 Runtime Environment, SE v1.4.2_03
    Java(TM) 6 Update 10
    LimeWire PRO 4.18.8

Do you know what this file is?
C:\fraglist.luar

Please download the OTMoveIt3 by OldTimer.

  • Save it to your desktop.
  • Please double-click OTMoveIt3.exe to run it.
  • Copy the bolded text below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):


    :files
    C:\pv.exe
    c:\windows\system32\gxvxccounter
    c:\program files\BitComet
    c:\docume~1\alluse~1\applic~1\Azureus
    c:\docume~1\owner\applic~1\Azureus
    C:\Documents and Settings\Owner\Desktop\dds.scr


  • Return to OTMoveIt3, right click in the "Paste instructions for items to be Moved" window (under the light blue bar) and choose Paste.
  • Click the red Moveit! button.
  • Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
  • Close OTMoveIt3
If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

Please post the OTMoveIt log.

............................................................................................

Site Admin / Security Administrator

Virus Removal ~ OS Support ~ Have we helped you? Help us! ~ GeekChat
- Please PM me if I fail to respond within 24hrs.
win32.Agent. ODG virus in operating memory - Page 1 DXwU4
win32.Agent. ODG virus in operating memory - Page 1 VvYDg

descriptionwin32.Agent. ODG virus in operating memory - Page 1 EmptyRe: win32.Agent. ODG virus in operating memory

more_horiz
========== FILES ==========
C:\pv.exe moved successfully.
c:\windows\system32\gxvxccounter moved successfully.
c:\program files\BitComet\torrents moved successfully.
c:\program files\BitComet\share moved successfully.
c:\program files\BitComet\archive moved successfully.
c:\program files\BitComet moved successfully.
c:\docume~1\alluse~1\applic~1\Azureus moved successfully.
c:\docume~1\owner\applic~1\Azureus\torrents moved successfully.
c:\docume~1\owner\applic~1\Azureus\tmp moved successfully.
c:\docume~1\owner\applic~1\Azureus\subs moved successfully.
c:\docume~1\owner\applic~1\Azureus\shares moved successfully.
c:\docume~1\owner\applic~1\Azureus\plugins moved successfully.
c:\docume~1\owner\applic~1\Azureus\net moved successfully.
c:\docume~1\owner\applic~1\Azureus\logs moved successfully.
c:\docume~1\owner\applic~1\Azureus\dht moved successfully.
c:\docume~1\owner\applic~1\Azureus\active moved successfully.
c:\docume~1\owner\applic~1\Azureus moved successfully.
C:\Documents and Settings\Owner\Desktop\dds.scr moved successfully.

OTMoveIt3 by OldTimer - Version 1.0.11.0 log created on 04152009_101348

descriptionwin32.Agent. ODG virus in operating memory - Page 1 EmptyRe: win32.Agent. ODG virus in operating memory

more_horiz
I removed bitcomet and limewire

descriptionwin32.Agent. ODG virus in operating memory - Page 1 EmptyRe: win32.Agent. ODG virus in operating memory

more_horiz
We can remove OTMoveIt now.

  • Please double-click OTMoveIt3.exe to run it again.
  • Press the green CleanUp! button.
  • Press Yes cleanup process prompt, do the same for the reboot prompt.
How is the machine running now?

............................................................................................

Site Admin / Security Administrator

Virus Removal ~ OS Support ~ Have we helped you? Help us! ~ GeekChat
- Please PM me if I fail to respond within 24hrs.
win32.Agent. ODG virus in operating memory - Page 1 DXwU4
win32.Agent. ODG virus in operating memory - Page 1 VvYDg

descriptionwin32.Agent. ODG virus in operating memory - Page 1 EmptyRe: win32.Agent. ODG virus in operating memory

more_horiz
my computer is normal now Thank You!

Cheers Mate

descriptionwin32.Agent. ODG virus in operating memory - Page 1 EmptyRe: win32.Agent. ODG virus in operating memory

more_horiz
We need to make a new restore point.

To turn off System Restore, follow these steps:
1. Click Start, right-click My Computer, and then click Properties.
2. Click the System Restore tab.
3. Click the Turn off System Restore check box (or the Turn off System Restore on all drives check box), and then click OK.
4. Click Yes when you receive the prompt to the turn off System Restore.

Now we need to make a new restore point.
To turn on System Restore, follow these steps:
1. Click Start, right-click My Computer, and then click Properties.
2. Click the System Restore tab.
3. Click the Turn off System Restore check box (To turn on System Restore), and then click OK.

Below I have included a number of recommendations for how to protect your computer in order to prevent future malware infections. Please take these recommendations seriously; these few simple steps can stave off the vast majority of spyware problems. As happy as we are to help you, for your sake we would rather not have repeat customers. Goofy

1) Please navigate to http://windowsupdate.microsoft.com and download all the "critical updates" for Windows. This can patch many of the security holes through which attackers can gain access to your computer.

Please either enable Automatic Updates under Start -> Control Panel -> Automatic Updates , or get into the habit of checking for Windows updates regularly. I cannot stress enough how important this is.

2) In order to protect yourself against spyware, you should consider installing and running the following free programs:

Ad-Aware SE
A tutorial on using Ad-Aware to remove spyware from your computer may be found here.

Spybot-Search & Destroy
A tutorial on using Spybot to remove spyware from your computer may be found here. Please also remember to enable Spybot's "Immunize" and "TeaTimer" features.

SpywareBlaster
A tutorial on using SpywareBlaster to prevent spyware from ever installing on your computer may be found here.

SpywareGuard
A tutorial on using SpywareGuard for realtime protection against spyware and hijackers may be found here.

Make sure to keep these programs up-to-date and to run them regularly, as this can prevent a great deal of spyware hassle.

3) Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in popup blocker (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from here:
http://www.mozilla.org/products/firefox/
I also recommand the following add-ons for Firefox, they will help keep you safe from malicious scripts or activeX exploits.
https://addons.mozilla.org/en-US/firefox/addon/722
https://addons.mozilla.org/en-US/firefox/addon/1865
https://addons.mozilla.org/en-US/firefox/addon/433

4) Also make sure to run your antivirus software regularly, and to keep it up-to-date.

To help you keep your software updated, please considering using this free software program that will check for program updates.
Update Checker

5) Finally, consider maintaining a firewall. Some good free firewalls are Kerio, or
Outpost
A tutorial on understanding and using firewalls may be found here.

Please also read Tony Klein's excellent article: How I got Infected in the First Place

If you would take a moment to fill out our feedback form, we would appreciate it.
The link can be found here.

Hopefully this should take care of your problems! Good luck. Big Grin

............................................................................................

Site Admin / Security Administrator

Virus Removal ~ OS Support ~ Have we helped you? Help us! ~ GeekChat
- Please PM me if I fail to respond within 24hrs.
win32.Agent. ODG virus in operating memory - Page 1 DXwU4
win32.Agent. ODG virus in operating memory - Page 1 VvYDg

descriptionwin32.Agent. ODG virus in operating memory - Page 1 EmptyRe: win32.Agent. ODG virus in operating memory

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum