xou32

[quirkatron]

i've always been secure with my PC, i'm running vista and have nod32 installed, i never go to dodgy websites or anything..

i consider myself a safe user, i'm the main user of my PC, at times my room mate uses it, but i highly doubt this is their fault..

anyways, after a class at tafe i can home and plugged my usb in, nod 32 popped up and said virus blah blah.. it was deleted.

apparently the tafe computers had a virus..

anyways, every time i turn on my laptop a properties box is open:

and everytime it says its been deleted with the current time

i tried searching on google, but nothing came up

i have no idea what it is, i dont even think it had anything to do with the tafe computers

but i'm worried that it could be doing harm

[PermaSt0ne]

the S-1-5-21 location is an old recycle bin

go to C:\$recycle.bin and see if it's there

[quirkatron]

it wasnt there, i deleted all the other s-1-5... folders and restart, still comes up...

[quirkatron]

something must be up

[quirkatron]

now the properties box is missing attributes.

does anyone have any idea what this is? its pretty annoying knowing that somethings wrong...

my OCD is kicking in

[PermaSt0ne]

something must be up

that means you're infected and NOD didn't get it all

download SUPERAntiSpyware (i know the name makes it sound bogus, but it is the best anti-spyware / malware program out there right now)

install, boot into safe mode and scan your entire computer. i don't remember if NOD can run in safemode but try that too

[quirkatron]

done. however the problem is still not fixed the properties box still pops up when i turn on

i was on a mac today (at school) and had my usb in, i saw that in recycler xou32.exe was in there, it was 12kbs and locked, i deleted it.

it said it had been there since the 20th of june...

WHAT IS xou32.exe !?!?

[PermaSt0ne]

done. however the problem is still not fixed the properties box still pops up when i turn on

i was on a mac today (at school) and had my usb in, i saw that in recycler xou32.exe was in there, it was 12kbs and locked, i deleted it.

it said it had been there since the 20th of june...

WHAT IS xou32.exe !?!?

xou32 is a name randomly generated by whatever tried to infect your machine

go to start > run > msconfig and look under the start up tab, see if it's in there. if not then you can download HijackThis and run it, see if you can find anything linking to xou32

Edited July 25, 2008 by PermaSt0ne

[+Biscuits Brown MVC]

I believe this link will help you immensely

Removal Instructions for AntiVirus 2009

[quirkatron]

done.....

[blogsdna]

To delete files which are locked or access denied use Delete on Boot soft.it will delete the file as soon as you reboot your machine

[:Karla:]

My school currently has this virus - we've found you can get rid of it using AVG (free download here). It seems to hide in the System Restore files when you try to delete it, but AVG picks these copies up and permanently deletes them.