help cv22.cmd attack

Discussion in 'Windows Desktop Systems' started by zandyrei, Mar 1, 2009.

  1. zandyrei

    zandyrei TinySoft

    Messages:
    113
    Location:
    PH
    guys how can i remove this virus? my pc is infected and its very slow... evry antivirus will not start

    this cv22.cmd cant be detected by avira, avast, and s&d....

    -it disables, task manager, show all files, cmd prompt
    -it creates a duplicate of all files in my pc which has a a file size of 95.1kb
    -it hides all original files leaving the duplicates..one reason why i cant run anivirus programs because all original .exe files are hidden... im not in the mood to reformat because i dont have backup on my files..and all of them have duplicates..

    example:

    folders name is AVG then it creates a duplicate called AVG.exe then hides the original file.... i cant run anything even highjackthis...
     
  2. Android412

    Android412 OSNN Addict

    Messages:
    199
    Location:
    Hamilton, ON
    safe mode?
     
  3. American Zombie

    American Zombie Moderator Staff Member Political User

    Messages:
    2,934
    Location:
    Seattle
    Rename hijackthis to something else before running it.
     
  4. LordOfLA

    LordOfLA Godlike!

    Messages:
    7,027
    Location:
    Maidenhead, Berkshire, UK
    at this point in time, your only option is to reformat.

    Even if you can get the main AV file to run - the virus likely knows of the other files and can/has renamed and hidden them.
     
  5. tdinc

    tdinc █▄█ ▀█▄ █ Political User

    Messages:
    3,507
    Location:
    Sterling Heights, MICHIGAN
    Lord is right, it will save you time to just reformat. doing brain surgery for the virus at this point is useless.
     
  6. toumi

    toumi OSNN One Post Wonder

    Messages:
    1
    Last edited by a moderator: Mar 11, 2009
  7. LordOfLA

    LordOfLA Godlike!

    Messages:
    7,027
    Location:
    Maidenhead, Berkshire, UK
    if you have a virus you would be incredibly stupid not to reformat to be perfectly blunt about it.
     
    Last edited: Mar 11, 2009