i got a worm.solow.a and a worm.solow.b,,,, i cant really remove this one its so tough ive been using many worm removals but still it doesnt work…. it keeps on coming back and for that i cant open all my three hard drives directly…. please help me please…will hijackthis can fix it,,,? please help me…thanks so much guys and more power…..
i got a worm.solow.a and a worm.solow.b,,,, i cant really remove this one its so tough ive been using many worm removals but still it doesnt work…. it keeps on coming back and for that i cant open all my three hard drives directly…. please help me please…will hijackthis can fix it,,,? please help me…thanks so much guys and more power…..
Welcome back to the forums. I have merged the 2 new topics that you just started. Please only start one new topic for a new issue by using the Add Reply button on the lower right hand side of your screen.
We need to have you run HijackThis and provide us with a log so we can identify any malware on your computer.
Download a copy of HJTsetup.exe from Here and save it to your Desktop.
Double click HJTsetup.exe to begin installation.*By default it will install to C:\Program Files\HijackThis.
*Continue to click Next in the setup dialog boxes until you get to the Select Addition Tasks dialog.
*Put a check by Create a desktop icon then click Next again.
*Continue to follow the prompts from there.
*When HJT opens, click on the Do a system scan and save a log file button.
*When HJT has finished scanning, a window entitled "hijackthis.log" will open - when you close this window the log will be saved into the hijackthis folder.
Copy and paste this log into your reply by using the Add Reply button on the lower right hand side of the screen.
good day sir,, sorry bout that i just can help myself this worm is killing me…..
heres the logfile sir,,, now the virus seems to affect my email i cant open my own email address….
hope you could help me sir please am begging u sir…. thanx alot sir….
Logfile of HijackThis v1.99.1
Scan saved at 3:24:45 AM, on 2/27/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
We need to make sure all hidden files are showing so please:
* Click Start.
* Open My Computer.
* Select the Tools menu and click Folder Options.
* Select the View Tab.
* Under the Hidden files and folders heading select Show hidden files and folders.
* Uncheck the Hide protected operating system files (recommended) option.
* Click Yes to confirm.
* Click OK.
Please reverse this process once the fix is complete.
————————————————————
Run HijackThis. Hit None of the above, Click Do a System Scan Only. Put a Check in the box on the left side on this:
O4 - HKLM\..\Run: [FS6519] C:\WINDOWS\FS6519.dll.vbs
Then close all windows except this one and press Fix checked.
Using Windows Explorer please delete the following file:
Under Main select the following:
Under Main choose: Select All
Click the Empty Selected button.
If you use Firefox:
Click Firefox at the top and choose: Select All
Click the Empty Selected button.
NOTE: If you would like to keep your saved passwords, please click NO at the prompt.
It's normal after running ATF cleaner that the PC will be slower to boot the first time.
————————————————————-
Now reboot if you haven't already done so.
Using Internet Explorer, click on Kaspersky Online Scanner * You will be prompted to install an ActiveX component from Kaspersky, Click 'Yes'.
* The program will launch and then start to download the latest definition files.
* Once the scanner is installed and the definitions downloaded, click 'Next'.
* Now click on 'Scan Settings'
* In the scan settings make sure that the following are selected:
o Scan using the following Anti-Virus database: 'Extended' (If available, otherwise 'Standard')
o Scan Options: 'Scan Archives' and 'Scan Mail Bases'
* Click 'OK'
* Now under 'Select a target to scan' select 'My Computer'
* The scan will take a while, so be patient and let it run. Once the scan is complete, it will display whether your system has been infected.
* Now click on the 'Save as Text' button:
* Save the file to your desktop.
Please post the Kaspersky report and a new HijackThis log.
but the Kaspersky Online Scanner is not working well with my pc at the 15-20% of scanning it suddenly stops or the internet explorer occured a problem,, can i use this in firefor instead…
i can now open my mail sir.. thanks for that alot….
but still i cant open the hard drives yet….
this is my latest hijacklog file…
Logfile of HijackThis v1.99.1
Scan saved at 4:18:46 AM, on 2/28/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
We can have you try the Trend Micro scan. It should work with IE or Firefox.
TrendMicro™ HouseCall Java Scan
Please go HERE to run the Trend Micro™ HouseCall Scan.
Click Scan now. It's free!
Read and put a Check next to Yes I accept the terms of use.
Click the Launching HouseCall>> button.
If confirmed that HouseCall can run on your system, under Using Java-based HouseCall kernel click the Starting HouseCall>> button.
You may receive a Security Warning about the TrendMicro Java applet, click YES.
Under Scan complete computer for malware, grayware, and vulnerabilities click the Next>> button.
Please be patient while it installs, updates, and scans your system.
Once the scan is complete, it will take you to the summary page.
Under Cleanup options, choose clean all detected infections automatically.
Click the Clean now>> button.
If anything was found you may be prompted to run the scan again, you can just close the browser window.
but still i cant open the hard drives yet….
When you say you can't open them, what do you mean? Do you get some kind of error? Can you not see them? Please give me some detail as to what is going on.
hi sir,,,,,
just finished the trend micro scanning ………….. removed some malware….
when i go directly to my computer and i will open up my three hard drives by clicking it,,, an error message will pop up saying "WINDOWS SCRIPT HOST… CAN NOT FIND SCRIPT FILE C:\FS6519.dll.vbs….. and i guese this the virus it self,, huhuuhu what will i do please help me,, but on the trend micro scanning it doesnt detect any worm solow…
thanks sir for helping out i hope this will be solved am slowly losing hope…
1. Extract it to it's own folder & double click SREng.exe to run it
2. Select 'Smart Scan' & tick "Verify the digital signature of process modules"
3. Click on the [Scan] button
4. When finished, click on the [Save Reports] button & save the log to Desktop
5. Post the log in your next reply. You may have to use more than one post so they don't get cut off.
no.. those are my hard drives….. drives c;d and e….
this is the log sir….
2007-03-02,04:22:24
System Repair Engineer 2.3.13.690
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600)
- Administrative User - Completed Functions Allowed
Follow item(s) have been choosed:
All Boot Items (Including Registry, Startup Folders, Services and so on)
Browser Add-ons
Runing Processes (Including process model information)
File Associations
Winsock Provider
Autorun.Inf
HOSTS File
* Download Dr.Web CureIt to the desktop:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
Doubleclick the drweb-cureit.exe file and Allow to run the express scan
This will scan the files currently running in memory and when something is found, click the yes button when it asks you if you want to cure it. This is only a short scan.
Once the short scan has finished, Click Options > Change settings
Choose the "Scan"-tab, remove the mark at "Heuristic analysis".
Back at the main window, mark the drives that you want to scan.
Select all drives. A red dot shows which drives have been chosen.
Click the green arrow at the right, and the scan will start.
Click 'Yes to all' if it asks if you want to cure/move the file.
When the scan has finished, look if you can click next icon next to the files found: [external image: Posted Image]
If so, click it and then click the next icon right below and select Move incurable as you'll see in next image: [external image: Posted Image]
This will move it to the %userprofile%\DoctorWeb\quarantaine-folder if it can't be cured. (this in case if we need samples)
After selecting, in the Dr.Web CureIt menu on top, click file and choose save report list
Save the report to your desktop. The report will be called DrWeb.csv
Close Dr.Web Cureit.
Reboot your computer!! Because it could be possible that files in use will be moved/deleted during reboot.
After reboot, post the contents of the log from Dr.Web you saved previously in your next reply.
hi sir…
i cant have my computer scan on all the hard drives simultaneously…. i keeps on hanging,, tried it for 5 times… what i did was i scan all my three hard drives separately,,,, and no virus was either found… also i cant click on the button your referring to for the logfile… is there anymore chance for this worm ? thanks for helping me out sir,,, i hope we can find solution for this.. thanks…
Please download FixWareout from one of these sites:
http://downloads.subratam.org/Fixwareout.exe
http://www.bleepingcomputer.com/files/lonny/Fixwareout.exe
Save it to your desktop and run it. Click Next, then Install, make sure "Run fixit" is checked and click Finish.
The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.
Once the desktop loads please post the text that will open (report.txt) and a new HijackThis log.
Now lets check some settings on your system. (2000/XP) Only
In the windows control panel. If you are using Windows XP's Category View, select the Network and Internet Connections category otherwise double click on Network Connections. Then right click on your default connection, usually local area connection for cable and dsl, and left click on properties. Click the Networking tab. Double-click on the Internet Protocol (TCP/IP) item and select the radio dial that says Obtain DNS servers automatically
Press OK twice to get out of the properties screen and reboot if it asks.
That option might not be avaiable on some systems
Next Go start run type cmd and hit OK
type
ipconfig /flushdns
then hit enter, type exit hit enter
(that space between g and / is needed)
✨ Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI
