Ive used like 2 weeks internet explorer ... and now .. when i connect to the internet , comodo firewall tells me that a program zvdrtydgz.exe its trying to connect to the internet… Figures that i give him DENY … but next time when i reconnect … a new program like gdfgaetsf.ex trys again …
Ive unistalled the IE ... but still the same problem ... Someone told me that i wont get rid of that prog unless i reinstall windows … and thats bad ... How can i remove the prog, who its probablly a spyware or something …
It`s located in the /temp directory … and has another file called same name but with .tpl extension … What can I DO ???
Hi, first of all, the “exact” application trying to access the internet would be helpful. Let’s not think re-install just yet, you have many options. Can you explain in just a bit better detail of what IE you installed, beta 7? What operating system you have. Probably download hijackthis and show a scan log as well, or if you can screenshot the comodo logs.
On top of what Paul says I would also download Ewido anti-spyware, update it, then run it in safe mode. Do the same with ad-aware. I would also update and run your Anti-virus program in safe mode.
Logfile of HijackThis v1.99.1
Scan saved at 19:54:51, on 07.10.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
There’s definitiely something bad lurking in your system, but nothing really stands out in your HJT log. Really odd. Obviously this is something that CAVS doesn’t yet know about.
If you use task manager to kill off the executable, does it, or another similarly oddly named exe reappear?
Have you tried using some of the other online malware scans? Have you tried downloading another spyware cheker, like Ewido?
I’d download Ewido ro Spybot, run it, quarantine whatever it finds and then submit the file to Comodo for analysis an inclusion in its databases.
Please post your results back here for the benefit of others.
It was a file called ntsystem.exe that tryed to hijack when i was rebooting. The path was C:\Windows\system32\ntsystem.exe .Thats the program that hijackme. THANKS GOD for telling me about ewido, cause adware or xoft didnt found it. The infection is with Hijacker.Agent.hg.
Comodo antivirus didnt found it, adware didnt found it, xoft didnt found it, only ewido. Ill submit the file, just i must find out where … and how … i`ll try using cav.
Just submited the file. The name that ive submited its filE7D4EF10.dat cause its in quarantine with ewido, and i didnt want to restore it … FIGURES !!! Hope that helps you, cause it sure helped me to get rid of that pesky zcxvxcvb.exe trying to connect, or vcxzbvcb.exe , or tzgsdgfs.exe … whatever name he got … THANKS !!!
Ive deleted the file ntsystem.exe ... and after reboot, it has reapear, ewido anti-spyware told me again that a file c:\window\system32\ntsystem.exe tryes to hijack me ... ■■■■ ... how do i get RID of IT ??? HELP !!! ... ive deleted it and appear again … what can i do ? ???
Im sorry to say ..but ive uninstalled CAV … I had to try with other antivirus … and tested NOD32 … and … it solved the problem , found the virus that was luring in my computer … sorry to say, i wont install CAV very soon, cause im not protected with it … Hope you will make it work against those kind of treaths … take care
I’m sorry about your infection but you did get rid of it and that is the important thing, as for CAVS it is currently Beta 1.1 but Beta 2 is about to be released soon and that will be much better. As for Nod32 it is a great antivirus, however in time Comodo will become better
