Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

kxvo.exe PLEASE HELP [RESOLVED]


  • This topic is locked This topic is locked

#286
amm007

amm007

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 265 posts
ow! redirection is present at this point.will reformatting remove this thing?
  • 0

Advertisements


#287
kahdah

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
On what computers is the redirection present?
  • 0

#288
amm007

amm007

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 265 posts
1 and 2
  • 0

#289
kahdah

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
Only stick to computer one with this tool then we will move on to the rest.

Please download Navilog1 by IL-MAFIOSO:
http://pagesperso-or...ix/Navilog1.exe
(*Alternate download location Here)

* Save it to your Desktop.
* Double-click on Navilog1.exe to install the program.
* When the installation is complete, the tool will start automatically.
* If it doesn't start automatically, please double-click on the Navilog1 shortcut on your Desktop to run it.
* Press E for English from the language Menu.
* Type 1 in the next Menu to select Search and press Enter.
* Wait for the Scan to finish (It may take a reasonable amount of time).
* Press any key as requested .
* A new document will be produced: fixnavi.txt.
* Please copy/paste the contents of this report in your next reply.

The report is also saved in the root of the directory, "%SystemDrive%\fixnavi.txt". (usually C:\fixnavi.txt)
  • 0

#290
amm007

amm007

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 265 posts
Search Navipromo version 3.6.3 began on Fri 08/15/2008 at 18:34:43.50

!!! Warning, this report may include legitimate files/programs !!!
!!! Post this report on the forum you are being helped !!!
!!! Don't continue with removal unless instructed by an authorized helper !!!
Fix running from C:\Program Files\navilog1
Actual User Account : "Adrian"

Updated on 09.08.2008 at 18h00 by IL-MAFIOSO


Microsoft Windows XP [Version 5.1.2600]
Version Internet Explorer : 7.0.5730.13
Filesystem type : NTFS

Search done in normal mode

*** Searching for installed Software ***


*** Search folders in "C:\WINDOWS" ***


*** Search folders in "C:\Program Files" ***


*** Search folders in "C:\Documents and Settings\All Users\startm~1\programs" ***


*** Search folders in "C:\Documents and Settings\All Users\startm~1" ***


*** Search folders in "c:\docume~1\alluse~1\applic~1" ***


*** Search folders in "C:\Documents and Settings\Adrian\applic~1" ***


*** Search folders in "C:\DOCUME~1\ADMINI~1\applic~1" ***


*** Search folders in "C:\Documents and Settings\Adrian\locals~1\applic~1" ***


*** Search folders in "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***


*** Search folders in "C:\Documents and Settings\Adrian\startm~1\programs" ***


*** Search folders in "C:\DOCUME~1\ADMINI~1\startm~1\programs" ***


*** Search with Catchme-rootkit/stealth malware detector by gmer ***
for more info : http://www.gmer.net



*** Search with GenericNaviSearch ***
!!! Possibility of legitimate files in the result !!!
!!! Must always be checked before manually deleting !!!

* Scan in "C:\WINDOWS\system32" *

* Scan in "C:\Documents and Settings\Adrian\locals~1\applic~1" *

* Scan in "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *



*** Search files ***



*** Search specific Registry keys ***


*** Complementary Search ***
(Search specific files)

1)Search new Instant Access files :


2)Heuristic Search :

* In "C:\WINDOWS\system32" :


* In "C:\Documents and Settings\Adrian\locals~1\applic~1" :


* In "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :


3)Certificates Search :

Egroup certificate not found !
Electronic-Group certificate not found !
Montorgueil certificate not found !
OOO-Favorit certificate not found !
Sunny-Day-Design-Ltd certificate not found !

4)Search known files :



*** Search completed on Fri 08/15/2008 at 18:41:13.87 ***
  • 0

#291
kahdah

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
Hmm still nothing.

Let's try this.

Go to Start > Run type in Cmd then hit ok
At the command prompt which will be this C:|WIndows\system32 type in this > ipconfig /flushdns then hit enter.
You should get this message > Successfully flushed the DNS Resolver Cache.

AFter thta reboot and tell me if the redirects are still present?
  • 0

#292
amm007

amm007

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 265 posts
Its still present. Ill just try to back-up format the disk and then i will get back here to repost logs. Let me know if there is still traces of virus from my backup scheme. Thanks!
  • 0

#293
kahdah

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
Ok.
  • 0

#294
amm007

amm007

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 265 posts
I have just finished reformatting my PC. What scanner log do I post? site redirection became present in my browser. i suspect its because of my removable hard drive. i havent plugged any usb disk other than that. i plan to format that drive too after some back-ups and use it on computer 2 to format and back up again. thanks!
  • 0

#295
kahdah

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
You didn't do a repair install did you?
  • 0

Advertisements


#296
amm007

amm007

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 265 posts
what do you mean by repair install?
  • 0

#297
kahdah

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
That means that you did not format the drive just put in the disk and chose R for repair to repair the files.
You should not have redirects if you did it as format (Wiping the drive clean then re-installing Windows.)
  • 0

#298
amm007

amm007

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 265 posts
No i did not. i formatted the whole drive c. But I cant let go of my files so i backed it up in the removable hard disk (which seems infected). I opened it using the run prompt for security purposes but still it infected my computer with the link redirection...looks like we just have to wipe clean this thing..
  • 0

#299
kahdah

kahdah

    GeekU Teacher

  • Retired Staff
  • 15,822 posts
Yes if you don't you will end up in the same place as before.
  • 0

#300
amm007

amm007

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 265 posts
Okay. But i guess this minimized the rate of resiliency. Shall we proceed to completely cleaning the newly formatted computer 1? afterwards, i'll format computer 2 and use the removable hard disk to back up files at the same time cleaning all other flash disks i have. then lastly, format my removable hard disk. then, we reinspect logs and check if virus symptoms are now gone and is not resilient. is this scheme practical? thanks again for helping this far.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP