NEED HELP!!!!!! (virus) Options
Dragon
#1 Posted: : Thursday, March 29, 2007 3:38:19 PM
Rank: Administration


Groups: {pDs} Member, Server Admin, WDFNews.com Official Mapper

Joined: 5/31/2006
Posts: 3,454
Points: 445
Location: Merryland

yeah so i have a virus. i ended up deleting some of the files (about half maybe like 5/8) so the files that i know are the virus is isadd.dll, isamntr.exe and isamini.exe i cant delete those because they are in use. i cant end the process in Windows Task Manager because they pop back up in the list immediately. i ran a virus scan on it (i have AVG) and it doesnt detect it for some reason. windows defender tries to delete it but for some reason it cant do it. it gives me this:

Error encountered:

Code 0x80508017. Some actions couldn't be applied to potentially harmful items. The items might be stored in a read-only location. Delete the files or folders that contains the items or, for information on removing read-only permissions from files and folders, see Help and Support.

Category:

Trojan Downloader

Description:

This program has potentially unwanted behavior.

Advice:

Review the alert details to see why the software was detected. If you do not like how the software operates or if you do not recognize and trust the publisher, consider blocking or removing the software.

Resources:

process:

pid:4000

clsid:

HKLM\SOFTWARE\CLASSES\CLSID\{A6ACAE64-F798-4930-AD86-BD3FB32038DB}

regkey:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A6ACAE64-F798-4930-AD86-BD3FB32038DB}

regkey:

HKLM\Software\Classes\clsid\{A6ACAE64-F798-4930-AD86-BD3FB32038DB}

regkey:

HKCU@S-1-5-21-376849671-2428409633-4025966157-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A6ACAE64-F798-4930-AD86-BD3FB32038DB}

bho:

HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\BROWSER HELPER OBJECTS\{A6ACAE64-F798-4930-AD86-BD3FB32038DB}

ieaddon:

HKCU@S-1-5-21-376849671-2428409633-4025966157-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\STATS\{A6ACAE64-F798-4930-AD86-BD3FB32038DB}

file:

C:\Program Files\Video Access ActiveX Object\isadd.dll

View more information about this item online

 

i need help immediately


Cantrip wrote:
When I die, I want to be reincarnated as a woman's jogging bra.
Splinter
#2 Posted: : Thursday, March 29, 2007 3:57:22 PM
Rank: Administration



Groups: Registered User, Server Admin

Joined: 9/7/2006
Posts: 3,054
Points: 1,377
Location: Abbotsford British Columbia, Canada
restart your PC in safe mode, simply run virus scan, if it still dont get rid of it then you should be able to delete them. safe mode boots up ONLY the needed files to run exactly the bare bone minimum.

gl

ahhhh_crap wrote:
no, splinter has ethics and whut has emotions
Dragon
#3 Posted: : Thursday, March 29, 2007 5:37:36 PM
Rank: Administration


Groups: {pDs} Member, Server Admin, WDFNews.com Official Mapper

Joined: 5/31/2006
Posts: 3,454
Points: 445
Location: Merryland
<3 mucho

Cantrip wrote:
When I die, I want to be reincarnated as a woman's jogging bra.
Users browsing this topic
Guest
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.