[kuttuani]

Hi all,

The problem im facing now is regarding a virus/trojan. I copied some video files from my friends usb data disk and this trojan entered. now task manager, regedit are disabled. the following folders are being created and replicated.
%System%\KHATARNAK.exe
[Drive Letter]\WINDOWS\KHATARNAK.exe
[Drive Letter]\Pictures.exe
[Drive Letter]\Songs.exe
[Drive Letter]\Documents and Settings.exe
[Drive Letter]\New Folder.exe
[Drive Letter]\New Folder(2).exe
[Drive Letter]\WINDOWS.exe
[Drive Letter]\files.exe
[Drive Letter]\Program Files.exe
[Drive Letter]\Cool Stuff.exe
[Drive Letter]\Games.exe
[Drive Letter]\Jokes(2).exe
[Drive Letter]\Secrets(2).exe



I have not installed any antivirus in my system and cant format the system as there are loads of data which is very important.

Can anyone suggest me an antivirus or something which is available as free which can remove all these trojans..

 

[PaddyN]

might not remove them all but you could get AVG, Ad-aware, Spybot search and destroy, or back up all your stuff you wana keep, get it disinfected and wipe and reinstall windows

 

[kuttuani]

Thank you but backing up and all is difficult for me now bcoz i have to spend a lot of money for that. 150 gb of data is there and that too official...

 

[PaddyN]

Try installing the programs i stated

 

[ThorXP]

Welcome to TSF....

To get Expert Help with malware removal:

I recommend that you read this article… ("Simply, click on the links to be re-directed.)

"Having problems with spyware and pop-ups? - First Steps";
http://www.techsupportforum.com/sec...read-before-posting-malware-removal-help.html

Please follow the instructions very carefully; then, post all the requested logs and information; as instructed, in the
HiJackThis Log Help Forum.
http://www.techsupportforum.com/security-center/hijackthis-log-help/

Please ensure that you create a new thread in the HiJackThis Log Help Forum;
not back here in this one.

When carrying out The 5 Steps,
http://www.techsupportforum.com/sec...read-before-posting-malware-removal-help.html

if you cannot complete any of them for whatever reason, just continue on with the next one until they are all completed.
However,it is extremely important to make mention of the fact that you could not complete any of the steps in your post to HiJackThis Log Help Forum.
http://www.techsupportforum.com/security-center/hijackthis-log-help/

where an Analyst will assist you with other workarounds.

Once done, please be patient, as the Security Team Analysts are usually very busy; one of them will answer your request as soon as they can. .