Tech Support Forum - View Single Post - Infections found following panda online active scan

Sempurna · 02-23-2007, 08:40 AM

Hi slinkykatt,

That file is likely hidden, but it is on your system. So, let’s use a file deletion utility to nuke it, shall we?

Please download OTMoveIt by OldTimer:

Save it to your desktop.
Please double-click OTMoveIt.exe to run it.
Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):

C:\WINDOWS\DHU.exe
Return to OTMoveIt, right-click on the Paste List of Files/Folders to be moved window and choose Paste.
Click the red MoveIt! button.
Copy everything on the Results window to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy), and paste it on your next reply.
Close OTMoveIt.

Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

NEXT:

Please reboot your computer normally into Windows, and then please post the report from OTMoveIt and a new HijackThis log.

How are things running now? Please let me know of any problems that still persist.

02-23-2007, 08:40 AM	#7 (permalink)
Sempurna Analyst, Security Team Join Date: Sep 2006 Posts: 1,302 OS: Windows XP SP2	Hi slinkykatt, That file is likely hidden, but it is on your system. So, let’s use a file deletion utility to nuke it, shall we? Please download OTMoveIt by OldTimer: Save it to your desktop. Please double-click OTMoveIt.exe to run it. Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy): C:\WINDOWS\DHU.exe Return to OTMoveIt, right-click on the Paste List of Files/Folders to be moved window and choose Paste. Click the red MoveIt! button. Copy everything on the Results window to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy), and paste it on your next reply. Close OTMoveIt. Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. NEXT: Please reboot your computer normally into Windows, and then please post the report from OTMoveIt and a new HijackThis log. How are things running now? Please let me know of any problems that still persist. __________________ Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum Last edited by Sempurna; 02-23-2007 at 08:41 AM.