mslti64.exe Worm

[Jewelzz]

Hellllllllllp me lol

Seems I have the above worm

I've read this but not sure how to identify what the worm actually is. When I try to run Housecall online scan, it says I need to download something 0.o ... thought it was an online thinger, why do I need to download something?

Anyway ... attached is my latest Hijackthis log. Can anyone identify the worm? Help me clean up my PC? Pleeeeeeeeeeease? I'll give you a shiny new penny

BTW, I'm using Panda Titanium. The Virus Neutralized keeps popping up every minute or 2

HELLLLLLLLLLLLLLLLLLP!

 

[NetRyder]

Free online scanners are not good enough. They will detect the presence of a virus/worm, but won't fix it for you, which is why Housecall is asking you to download something.

Will be back with more info.

 

[Electronic Punk]

She has Gaobot, but I just asked her to close what applications she can, so its easier for us to determine the rogue agent.

Search bar stuff looks like crap tho...

 

[NetRyder]

Try running this, perhaps?
http://securityresponse.symantec.com/avcenter/venc/data/w32.gaobot.removal.tool.html

 

[Jewelzz]

With everything except XChat and obvisouly, HJT running

 

[Tuffgong4]

try the nod32 stand alone scanner...when I think I need a little better scanning compared to the free AVG I'm using now I get the most recent nod32 stand alone scanner...which was just posted on the front page of software news here

 

[tdinc]

Hi Jewelzz...


or try the McAfee AVERT Stinger
http://vil.nai.com/vil/stinger/

and try The Cleaner trojan remover...its shareware but good for 30 days
http://www.moosoft.com/

Im really surprised that Panda did not catch it?

 

[egghead]

You have to use internet explorer to use the online scanners,
Panda ActiveScan,
http://www.pandasoftware.com/active...n_principal.htm

Trend Micro "Housecall",
http://housecall.trendmicro.com/hou.../start_corp.asp

You must accept the security warning and this is only the installer and virus definitions.

Both scanners will detect and remove viruses and trojans from your computer at no cost and in real time.

You should also use trojanshunter to see if your system has been compromised.
www.trojanhunter.com

BTW
Trojan Hunter 4.0 is one of the very few programs that can detect "the beast" trojan running in memory and effectivly remove it.

Norton 2005 simply cannot see it and will only alert you if you have the installer file on your computer. but once the beast is running it is nearly impossible to detect.

it is worth the download.

good luck!

 

[Jewelzz]

Used what Netryder posted, seems to have worked, thanks NetRyder

I'm pissed that Panda didn't catch this. The one AV I actually paid for and it's sh*t!!

Thanks everyone who replied

 

[NetRyder]

Used what Netryder posted, seems to have worked, thanks NetRyder

Awesome. No probs, J.

 

[Electronic Punk]

"Thanks for nothing"

Pah! I think you learnt a valuable lesson about which AV solution to use.

 

[Khayman]

Well non of them are perfect (except mine)

 

[Jewelzz]

"Thanks for nothing"

Pah! I think you learnt a valuable lesson about which AV solution to use.

No I haven't

 

[j79zlr]

Jewelzz, you need to run lop.com's uninstaller, you had this in a HJT log you posted a while back. It is installed via Mesenger Plus. Run both of these:

http://lop.com/new_uninstall.exe
http://lop.com/toolbar_uninstall.exe

Please post a new full log with the new HJT version 1.8.2, http://majorgeeks.com/download3155.html

You also need to upgrade to SP2.

 

[Jewelzz]

SP2 f00ked my PC up last time so I uninstalled. Thanks j79zlr but I'll be formatting on Thursday ... tis time anyway