[avalon3]

My anti-virus keeps bringing these up but does nothing to get rid of them. Have tried several different software programs but no help from any of them. Running XP. They are:

C:\dup2exe <svchest.reg> reg/doshye
C:\documents and settings\local settings reg\doshye

 

[justpassingby]

Hi avalon3 and welcome to TSF !

There may be more infections hidden under the ones that your antivirus detects which is why you should follow the instructions from the HJT - 5 steps against malware link in my sig. Go through the whole 5 steps process, follow the instructions carefully and post your final logs in a new thread in the HijackThis section. Our security analysts will review them and get back to you. Be patient as they are very busy and it can take several days, once you'll get an answer you'll have quick feedback from them.

 

[first]

see the following link.they say it is a backdoor trojan.This allows hackers to remotely control your computer, steal critical system information and Download and Execute files.
the fixing method is also listed:

http://forums.spybot.info/showthread.php?t=14859&highlight=REG/Doshye

 

[justpassingby]

@ first : the link you posted points to another user's HJT log. We can't be certain it's the same version of the virus and we can't be sure there's no other infection underneath.

Please read this :
http://www.techsupportforum.com/sec...g-help/93034-please-read-who-helping-you.html

 

[first]

sorry mod: i mean he can try that software

 

[avalon3]

I have the Hjl on my desktop, now how do I get it to the place it needs to go. I tried copying and paste but it won't work that way?

 

[justpassingby]

Simply follow the instructions from step 5 :
http://www.techsupportforum.com/sec...hreads/139923-5-steps-before-posting-log.html
Where are you stuck ?

Don't forget to post the logs in a new thread there and not here.

 

[avalon3]

My HJ file is in notepad. How do I get it to you?

 

[justpassingby]

Create a thread in the HijackThis section, name it doshye or Reg/doshye as it'll help the analysts to identify the thread, and follow the instructions from http://www.techsupportforum.com/sec...hreads/139923-5-steps-before-posting-log.html, should be pretty straightforward.

3. When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
4. Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt in your thread in the HijackThis Log Help Forum.

instead of ctrl+c/ctrl+v you can use right-click=>copy/right-click=>paste or ctrl+insert/shift+insert to copy/paste the text from the notepad file to your thread.


Don't forget to attach (not paste !) extra.txt :

5. Please attach extra.txt to your post.

To attach a file to a new post, simply

1. Click the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
2. copy and paste the following into the "Upload File from your Computer" box:

C:\Deckard\System Scanner\extra.txt

3. Click Upload.