Welcome, Guest. Please login or register.
March 22, 2010, 06:08:43 AM

Login with username, password and session length

373641 Posts
41468 Topics
94217 Members

Latest Member: Andrea19

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Learn about Computer Security and Interact with Security Experts
| |-+  Virus/Malware Removal Assistance
| | |-+  NewHeur_PE virus Removal?
« previous next »
Pages: 1 [2] Go Down Print
Author Topic: NewHeur_PE virus Removal?  (Read 24388 times)
Toggie
Guest
« Reply #15 on: November 12, 2007, 04:46:30 PM »

I've put 2.4 on for now, but 3 will go on as soon as it's final.
Logged
crouchjump
Newbie
*
Offline Offline

Posts: 1


« Reply #16 on: August 16, 2008, 02:08:40 PM »

sir i know this took so long to post again in this thread, but can you explain details on how you managed to delete this virus NewHeur_PE cause i have it also just recently.. it hides my files and now i cant open them.. i know its hidden cause the number of mb inside doesnt fit the number when i use properties. please i need this files. hope you can reply. i tried a lot of what i've read especially in your post but can't seem to delete it still.

again can you please tell me how to delete this. i already downloaded and used a-squared but still no progress. can't delete the autoruns cause they can't be searched. thanks in advance kind sir.
Logged
eXPerience
Malware Researcher Virus Removal Helper Advanced Tweak Freak Crazy Little Devil
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 6892


Why not ? The choice is yours !


« Reply #17 on: August 16, 2008, 02:14:24 PM »

if a-squared aint working use Superantispyware and/or malwarebytes antimalware

Xan
Logged

tanyamarie
Newbie
*
Offline Offline

Posts: 1


« Reply #18 on: August 18, 2008, 01:44:58 AM »

I dont know much about computers and I have this problem now on my computer. Its saying the ewheur_pe virus is attached to files i dont seem to be able to find. Is it best just to take it to a computer person to get it fixed or can someone coach me through this?
Logged
eXPerience
Malware Researcher Virus Removal Helper Advanced Tweak Freak Crazy Little Devil
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 6892


Why not ? The choice is yours !


« Reply #19 on: August 18, 2008, 02:52:37 AM »

I'll try to do my best  Smiley.

Anyway, are you sure you have an infection the 'infected' file is caught by heuristics. So I'm not sure if it's a real thread.

So could you please give me a hijack this log ? Download here

Just open, click on system scan and a logfile and place the log back here.

Xan
Logged

cinthetik
Newbie
*
Offline Offline

Posts: 1


« Reply #20 on: April 11, 2009, 12:19:59 AM »

i had f-secure and it didn't find this at all. it was a couple weeks befor i even noticed it... so it had alot of time to dig in. i realize i probably will just have to reformatt, but was wondering if there was something new out on this. nod32 found it befor in c:\windows\system, and was deleted. when i came back from outta town nod32 found it again, plus a couple new ones. heres some of what nod32 found.
4/10/2009 4:55:35 PM   Real-time file system protection   file   C:\WINDOWS\system32\lulihuni.exe   probably a variant of Win32/TrojanDownloader.Small.EDB trojan   cleaned by deleting - quarantined   KAHNS\Compaq_Administrator   Event occurred on a new file created by the application: C:\WINDOWS\explorer.exe.
4/9/2009 3:32:02 AM   Real-time file system protection   file   C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP229\A0045476.exe   probably unknown NewHeur_PE virus   deleted - quarantined   NT AUTHORITY\SYSTEM   Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
4/8/2009 4:13:39 PM   Real-time file system protection   file   C:\System Volume Information\_restore{106CF321-99A3-4E3A-9103-1BD027606A99}\RP229\A0045475.exe   Win32/Adware.Toolbar.Dealio application   cleaned by deleting - quarantined   NT AUTHORITY\SYSTEM   Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\svchost.exe.
and heres my hijackthis log. please if someone can help... what my main concern is i'm wondering if you guys think that this stuff spread to my external drives, and if i reformat and plug them back in will the dang thing just come back again? or is there anything new out that can rid me of this??
Logged
EricJH
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 5848



« Reply #21 on: April 13, 2009, 05:32:11 PM »

Hi cinthetik. Could you please start a new topic in this board as your problem is a different one. Don't forget to add the Hijack This log you promised.

Please make paragraphs in your new post instead of making one long paragraph with no visual structure, It makes it very hard to read and may deter people from reading your topic.
Logged

Please read: Introduction to the Sandbox

Using CIS v4 and always the latest snapshot of Opera browser.

AMD Phenom 925 quad core with 4 GB RAM on MSI 785G E53
A-Rloper
Newbie
*
Offline Offline

Posts: 1


« Reply #22 on: November 23, 2009, 02:39:29 PM »

Hello Quill:  I'm haveing the same problem with my computer, I found the Virus with Eset online scanner, but I can't remove it. Can you Please walk me threw the process? I'm new to this computer world and can not seem to follow your last e-maill  And what is CFP3?   that is what the other guy told you to down load to prevent any other virus entys
Thanks A-roper
Logged
Tags:
Pages: 1 [2] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.051 seconds with 18 queries.
Powered by SMF 1.1.11 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by 7dana.com