Mobile/PDA About Us Advertise here
User User name Password  
  Not registered yet? Register here.
Lost your password? Click here. 		 
  Home   News   Guides   Downloads   Glossary   Hardware   Profiles   Forums   v4  
 Advertise at AfterDawn.com     Link to us!     Private messages     Compose a private message     List of all updated threads     Threads without replies     Search messages
Wednesday 3.9.2025 / 21:40
Search AfterDawn Forums:        In English   Suomeksi   På svenska
afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > malware?
Show topics
 
Forums
Forums
malware?
  Jump to:
 
Posted Message
baconcane
Newbie
_ 		17. April 2007 @ 04:03 _ Link to this message    Send private message to this user   
How do I get rid of this malware?,,,,

BKDR_SERVU.GY

C:\WINDOWS\system32\drivers\etc\ras\SQLsecurity.exe
[ + quote]
baconcane
Newbie
_ 		17. April 2007 @ 04:26 _ Link to this message    Send private message to this user   
Here's my HijackThis log..



Logfile of HijackThis v1.99.1
Scan saved at 8:19:16 AM, on 4/17/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\drivers\etc\ras\SQLsecurity.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Canon\CAL\CALMAIN.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Milton Wade\Desktop\HijackThis.exe
[ + quote]
luizhwk
Newbie
_ 		27. June 2007 @ 08:13 _ Link to this message    Send private message to this user   
I got a machine with windows 2000 with the same files. C:\WINDOWS\system32\drivers\etc\ras\SQLsecurity.exe was a FTP Daemon in my case. I advise you to reinstall your SO, and with the firewall enable, run windows update until you receive the message: there are no more updates available (critical).
Were you running VNC, openssh or another service?
[ + quote]
afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > malware?
 

Digital video: AfterDawn.com | AfterDawn Forums
Music: MP3Lizard.com
Gaming: Blasteroids.com | Blasteroids Forums | Compare game prices
Software: Software downloads
Blogs: User profile pages
RSS feeds: AfterDawn.com News | Software updates | AfterDawn Forums
International: AfterDawn in Finnish | AfterDawn in Swedish | AfterDawn in Norwegian | download.fi
Navigate: Search | Site map
About us: About AfterDawn Ltd | Advertise on our sites | Rules, Restrictions, Legal disclaimer & Privacy policy
Contact us: Send feedback | Contact our media sales team
 
  © 1999-2025 by AfterDawn Ltd.

  IDG TechNetwork