Virus Removal Guru

Manuel June 24th, 2023 at 9:55 am

Hallo, i found this virus on my pc and this is my HijackThis log,
can you tell me how to remove that virus and if i got other in my system?
Thanks!!

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 9.14.53, on 13/06/2009

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Boot mode: Normal

Running processes:

E:\WINDOWS\System32\smss.exe

E:\WINDOWS\system32\winlogon.exe

E:\WINDOWS\system32\services.exe

E:\WINDOWS\system32\lsass.exe

E:\WINDOWS\system32\svchost.exe

E:\WINDOWS\system32\svchost.exe

E:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

E:\Programmi\Bonjour\mDNSResponder.exe

E:\WINDOWS\system32\nvsvc32.exe

E:\WINDOWS\Explorer.exe

E:\Programmi\Java\jre1.6.0_06\bin\jusched.exe

E:\WINDOWS\system32\RunDLL32.exe

E:\Programmi\Hard Drive Inspector\HDInspector.exe

E:\Programmi\iTunes\iTunesHelper.exe

E:\WINDOWS\system32\HDDSvc.exe

E:\WINDOWS\system32\rundll32.exe

E:\Programmi\iPod\bin\iPodService.exe

E:\WINDOWS\system32\svchost.exe

E:\Programmi\Trend Micro\HijackThis\HijackThis.exe

R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = E:\WINDOWS\pchealth\helpctr\System\panels\blank.htm

R1 – HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 – HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Collegamenti

F2 – REG:system.ini: Shell=Explorer.exe %windir%\system32\drivers\DllSrv.exe

O2 – BHO: AcroIEHlprObj Class – {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} – E:\Programmi\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 – BHO: SSVHelper Class – {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} – E:\Programmi\Java\jre1.6.0_06\bin\ssv.dll

O4 – HKLM\..\Run: [MediafourGettingStartedWithMacDrive6] “E:\Programmi\Mediafour\MacDrive\MacDrive.exe” /runonce

O4 – HKLM\..\Run: [SunJavaUpdateSched] “E:\Programmi\Java\jre1.6.0_06\bin\jusched.exe”

O4 – HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE E:\WINDOWS\system32\NvCpl.dll,NvStartup

O4 – HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit

O4 – HKLM\..\Run: [nwiz] nwiz.exe /install

O4 – HKLM\..\Run: [HDInspector.exe] E:\Programmi\Hard Drive Inspector\HDInspector.exe

O4 – HKLM\..\Run: [QuickTime Task] “E:\Programmi\QuickTime\QTTask.exe” -atboottime

O4 – HKLM\..\Run: [iTunesHelper] “E:\Programmi\iTunes\iTunesHelper.exe”

O4 – HKCU\..\Run: [Visual Subst] “E:\Programmi\Visual Subst\VSubst.exe” /startup

O4 – HKUS\S-1-5-19\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User ‘SERVIZIO LOCALE’)

O4 – HKUS\S-1-5-20\..\Run: [CTFMON.EXE] E:\WINDOWS\system32\CTFMON.EXE (User ‘SERVIZIO DI RETE’)

O9 – Extra button: (no name) – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – E:\Programmi\Java\jre1.6.0_06\bin\ssv.dll

O9 – Extra ‘Tools’ menuitem: Sun Java Console – {08B0E5C0-4FCB-11CF-AAA5-00401C608501} – E:\Programmi\Java\jre1.6.0_06\bin\ssv.dll

O9 – Extra button: Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – E:\Programmi\Messenger\msmsgs.exe

O9 – Extra ‘Tools’ menuitem: Windows Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – E:\Programmi\Messenger\msmsgs.exe

O23 – Service: Apple Mobile Device – Apple Inc. – E:\Programmi\File comuni\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 – Service: Bonjour Service – Apple Inc. – E:\Programmi\Bonjour\mDNSResponder.exe

O23 – Service: DllSrv Service Controler – Unknown owner – E:\WINDOWS\system32\drivers\DllSrv.exe (file missing)

O23 – Service: HDD Information Service (HDDSvc) – AltrixSoft (https://www.altrixsoft.com/) – E:\WINDOWS\system32\HDDSvc.exe

O23 – Service: InstallDriver Table Manager (IDriverT) – Macrovision Corporation – E:\Programmi\File comuni\InstallShield\Driver\1050\Intel 32\IDriverT.exe

O23 – Service: Servizio iPod (iPod Service) – Apple Inc. – E:\Programmi\iPod\bin\iPodService.exe

O23 – Service: NVIDIA Display Driver Service (NVSvc) – NVIDIA Corporation – E:\WINDOWS\system32\nvsvc32.exe

–

End of file – 3840 bytes