Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Help with "Win32:Obfuscated-CCV [Trj]"  (Read 3697 times)

0 Members and 1 Guest are viewing this topic.

ThePieGuyIsI

  • Guest
Help with "Win32:Obfuscated-CCV [Trj]"
« on: December 06, 2007, 11:25:01 PM »
Lately (the past couple of days) I've been getting more virus and trojan reports from my avast! scans so I did a memory test and it told me to restart the computer so it could do a scan; I did and when it was scanning "C:/WINDOWS/system32", it came up with 31 files infected with Win32:Obfuscated-CCV [Trj].
But when I tell it to delete  them, it say something to the effect of: "It's in a system file, are you sure you want to delete?" so I tried to repair them, it said that there was an error and it could not repair them, so I sent all the infected files to the virus chest.

So, my question is: should I delete them?; if not, then what do I do with them?

I figured I should put the names of the infected files, so, here they are: (Note that for all of these files, the origanal location is C:/WINDOWS/system32

dsakdyfw.exe

fjxrnxjd.exe

fysvuegr.dll (Note, infected with "Win32:BHO-JK [Trj]", not "Win32:Obfuscated-CCV [Trj]"

gajswvpu.exe

hmfvkirg.exe

iafpjbqd.exe

ihrhikko.exe

ivewvmkc.exe

jdvtvsau.exe

jiuwkbnw.exe

kmveqkps.exe

kwvhcfno.exe

kxjtyhwq.exe

lmuhiuux.exe

mvogrdtw.exe

nmrfsrck.exe

nnftbynj.exe

nwdxmfxh.exe

nwvidpky.exe

ptdbvukh.exe

pxpvxlau.exe

rpcwgfbd.exe

tdptaplk.exe

tlpgeumq.exe

tqniffno.exe

wlkbjrdi.exe

wtdvlqna.exe

wtuncjsg.exe

xgdgogxy.exe

xujobtkb.exe

xyhsridt.exe

yvpqardq.exe

Thanks for any help in advance. :)

Broni


    Mastermind
  • Kraków my love :)
  • Thanked: 614
    • Computer Help Forum
  • Computer: Specs
  • Experience: Experienced
  • OS: Windows 8
Re: Help with "Win32:Obfuscated-CCV [Trj]"
« Reply #1 on: December 06, 2007, 11:37:46 PM »

ThePieGuyIsI

  • Guest
Re: Help with "Win32:Obfuscated-CCV [Trj]"
« Reply #2 on: December 07, 2007, 12:15:45 AM »
  I did. I just wanted to know if it was okay to delete files even though they are in a system folder,  I can delete the malware but I only will if I know it's okay to since it's in a system folder.  

I am truly sorry if there is any confusion or if I'm seem arrogant and I'm getting on you're nerves, if I absolutely must go through that post and download all of that stuff I will, but if my question can be answered without doing all that then that would be awesome.

evilfantasy

  • Malware Removal Specialist
  • Moderator


  • Genius
  • Calm like a bomb
  • Thanked: 493
  • Experience: Experienced
  • OS: Windows 11
Re: Help with "Win32:Obfuscated-CCV [Trj]"
« Reply #3 on: December 07, 2007, 12:19:16 AM »
We can not advise on files/folders we can not see. So the steps, and the logs are required.


kuszmania9999



    Adviser

    Thanked: 3
    • citizenship
  • Experience: Beginner
  • OS: Unknown
Re: Help with "Win32:Obfuscated-CCV [Trj]"
« Reply #4 on: December 07, 2007, 12:22:35 AM »
do you have your installation disc?after deleting all of it, insert the disc and choose repair and not a clean install of windows.

P:s / are those .exe file really exist as system32?

evilfantasy

  • Malware Removal Specialist
  • Moderator


  • Genius
  • Calm like a bomb
  • Thanked: 493
  • Experience: Experienced
  • OS: Windows 11
Re: Help with "Win32:Obfuscated-CCV [Trj]"
« Reply #5 on: December 07, 2007, 12:28:23 AM »

P:s / are those .exe file really exist as system32?


That's why we need the logs, to see where everything is.

Tuur76

  • Guest
Re: Help with "Win32:Obfuscated-CCV [Trj]"
« Reply #6 on: December 07, 2007, 01:23:48 PM »
Hello there,

I have the same problems since 9 days.
CPU info:
man: Gateway
Win XP SP2
256 ram

Avast found the following trj's and adaware (see list below) When I get a notification I delete the files etc. I executed several boot scans, but every time i start my cpu they pop up again, nothing changes!!

this is what avast found, and keeps finding..
C:\Documents and Settings\tuur\Local Settings\Temporary Internet Files\Content.IE5\WTYJC9QJ\upd32_v14[1]

Win32:SecBar-B [Adw]

C:\DOCUME~1\tuur\LOCALS~1\Temp\cebecvdu.dll
Win32:SecBar-B [Adw]

C:\Documents and Settings\tuur\Local Settings\Temp\ jkoqwdge.exe is besmet door:
Win32: obfuscated-ccv

C:\systemvolume information\-restore {8E73F7FD-DABF-4799-84B7-DC441D36EB45}\RP171\A0027060.exe is besmet door:
Win32: obfuscated-ccv

And comparable other places (3 more): C:\systemvolume information\-restore …
Win32: obfuscated-ccv

Does somebody know what to do??

greetz,
Tuur

evilfantasy

  • Malware Removal Specialist
  • Moderator


  • Genius
  • Calm like a bomb
  • Thanked: 493
  • Experience: Experienced
  • OS: Windows 11
Re: Help with "Win32:Obfuscated-CCV [Trj]"
« Reply #7 on: December 07, 2007, 04:19:15 PM »
Welcome to Computer Hope Tuur.

You will need to read post #1 and #2 in this thread and attach the logs in a new thread for us to make a determination.

CBMatt

  • Mod & Malware Specialist


  • Prodigy

  • Sad and lonely...and loving every minute of it.
  • Thanked: 167
    • Yes
  • Experience: Experienced
  • OS: Windows 7
Re: Help with "Win32:Obfuscated-CCV [Trj]"
« Reply #8 on: December 12, 2007, 08:11:27 PM »
You both need to follow evilfantasy's advice.  It looks like you've both got Vundo, among other things.
Quote
An undefined problem has an infinite number of solutions.
—Robert A. Humphrey