Search the Community

Well, it seems that I have got infected. Yesterday, during my scheduled scan in Avira, it found a Trojan but was unable to remove it for some reason. I tried again on boot but Avira was still unable to remove it. The file shows in the log too. I cannot download anything unless its a *.zip file so please post any recommended removal tools as attachments. I would find a tool myself but I am unable to search for anything for now. ----------------------------------------------------------------------------- Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 2:23:16 PM, on 6/20/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe D:\Downloads\Avira AntiVir Removal Tool 3.0.1.16.exe C:\Program Files\Mozilla Firefox\firefox.exe D:\Downloads\HijackThis 2.0.2 (Executable).exe O2 - BHO: (no name) - {53C5DF30-5878-4596-8498-D4B59957776B} - C:\WINDOWS\system32\fccdecDw.dll O2 - BHO: (no name) - {BE7E4CE1-8CBA-44A6-956F-462A667D3286} - C:\WINDOWS\system32\urqQiFWP.dll O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [bMcf834d5e] Rundll32.exe "C:\WINDOWS\system32\nrirnwiw.dll",s O20 - Winlogon Notify: urqQiFWP - C:\WINDOWS\SYSTEM32\urqQiFWP.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe -- End of file - 1785 bytes -------------------------------------------------------------------------- Let me know if it can be cured or not as I am already due for a format. Also, as far as possible, please try and recommend some procedures which are not so CPU extensive as I have very low System Specifications. Thanks for any help that might be given. :) -- Goku