Virus???

[Chord]

Recently suspected a virus attack via email, scans find nothing but have strted getting firewall alerts for programs hltbrzupkm and qhfivawwiw which have no descriptions on properties. Programs are in C:/Windows/Sytem32 and on examination there is also a suspiciously similar looking program wqecgxxbpaja.

Only other thing that may be relevant at moment is that service pack 3 for Microsoft Office 2003 wont install due to error code 0x51F (any help on this one would be appreciated!)

[-pops-]

For your 0x51F error, have a look at http://support.microsoft.com/kb/875556

For the suspect virus, try running an online virus scan such as http://housecall.trendmicro.com/

Also you could scan with an antispyware program such as http://www.superantispyware.com/

[ɹəuəllıʍ ʇɐb]

I strongly suggest that you make sure that your system is 100% free of any malware before you attempt to install SP3 (or any service pack, for the matter).

Also, look up this post for more information on SP3 preparations.

[Chord]

For your 0x51F error, have a look at http://support.microsoft.com/kb/875556

For the suspect virus, try running an online virus scan such as http://housecall.trendmicro.com/

Also you could scan with an antispyware program such as http://www.superantispyware.com/

Thanks for reply, have run "Repair" option from install disk and SP3 has now installed successfully.

Just these pesky programs in System32 library, gotta be something somewhere that says whether they should be there, thinking of deleting them.

[Chord]

I strongly suggest that you make sure that your system is 100% free of any malware before you attempt to install SP3 (or any service pack, for the matter).

Also, look up this post for more information on SP3 preparations.

Thanks for reply, although I always try to ensure my system is free of Malware. The solution was to run the "Repair" option from my install disk, then SP3 installed fine.

[Dencandy]

Just these pesky programs in System32 library, gotta be something somewhere that says whether they should be there, thinking of deleting them.

The online scan from TrendMicro should tell whether these references are viruses or other malware & will tell you how to remove them.

Are you still getting warnings from your firewall and do you notice whether there's any other strange behaviour on your computer?

If everythings OK but you still want to delete them try this:

1 Increase your System Restore capacity on C drive to the maximum possible.

2 Create a Restore Point.

3 Delete one problem reference.

4 Run your computer for a day & check if everything goes smoothly. Restore if there's problems.

5 Repeat steps 2-5 for each of the problem references one by one.

6 Reduce your SR capacity to its usual level.

[Ignas]

I recommend you to use Kaspersky Internet Sequrity V8 (2009) go to kaspersky forums and find bete, they still free. Never ever got problems which viruses.

[Chord]

Recently suspected a virus attack via email, scans find nothing but have strted getting firewall alerts for programs hltbrzupkm and qhfivawwiw which have no descriptions on properties. Programs are in C:/Windows/Sytem32 and on examination there is also a suspiciously similar looking program wqecgxxbpaja.

Only other thing that may be relevant at moment is that service pack 3 for Microsoft Office 2003 wont install due to error code 0x51F (any help on this one would be appreciated!)

Further to the potential virus, programs hltbrzupkm and qhfivawwiw were in my startup so I deleted them but on every restart hltbrzupkm is put back in, any way I can identify how this is happening?

[Boris]

I suggest that you post a HijackThis log here :-

http://malwareremoval.com/forum/viewforum.php?f=11&sid

[Boris]

Recently suspected a virus attack via email, scans find nothing

What anti-virus and other anti-malware software have you used in these scans ?

[Dencandy]

In addition to the above from Boris, I think that if you've thoroughly cleaned your computer, and now have effective protection with a 2-way firewall, anti-virus & anti-adware utilities, as well as systems protection, the only way this pest can keep returning is from an internal source, most likely a Restore Point.

But do the HijackThis scan as Boris says, submit the report to the Forum he suggests, and follow the recommendations they make. Please let this forum know the outcome, as feedback is very helpful for others.

[Chord]

Recently suspected a virus attack via email, scans find nothing

What anti-virus and other anti-malware software have you used in these scans ?

I have scanned with AVG, Superantivirus, Trend Micro, Avast, Ad-Aware, Startup Mechanic and I use Zone Alarm as my firewall.

[Boris]

I have scanned with Superantivirus.

Do you mean SUPERAntiSpyware ?

[Hb_Kai]

If you get files like that, right-click them, go to Open With, open the file with Notepad then examine the code... That'll let you know if it's malicious. lol.

...If you understand the DOS commands or whatever commands it uses.

Stuff like that are usually silly little MS_DOS programs anyway, and are easily deleted.

[Chord]

Thanks 4 all replies, have moved the three progs to a MyDocs quarantine folder and renamed them and removed them from my start up, this seems to have cured the problem.

[Boris]

I still recommend that you post a HijackThis log as I suggested - there may be other (less immediately evident) problems still lurking on your PC ?

[Chord]

Recently suspected a virus attack via email, scans find nothing but have strted getting firewall alerts for programs hltbrzupkm and qhfivawwiw which have no descriptions on properties. Programs are in C:/Windows/Sytem32 and on examination there is also a suspiciously similar looking program wqecgxxbpaja.

Only other thing that may be relevant at moment is that service pack 3 for Microsoft Office 2003 wont install due to error code 0x51F (any help on this one would be appreciated!)

For info: latest version of Avast running highest level of scan has identified and deleted the copies I made of these programs.