Search : in
By :

Win32/psw.onlinegames.obj

Last answer on Feb 6, 2009 10:05:33 am GMT khanjee, on Jun 16, 2008 11:08:21 am BST 
 Report this message to moderators

Pl help me,
how can i remove this , Win32/psw.onlinegames.obj trojan

i be really thankful.
with regards

desperately waiting.

Best answers for « Win32/psw.onlinegames.obj » in :
.exe is not a valid Win32 application Show.exe is not a valid Win32 application Downloaded File IDE controller badly configured CD/DVD is unreadable File system corrupt File unregistered Virus/spyware Problem with browser configuration When you launch an executable file,...
Compiling an assembly program with Nasm ShowCompiling an assembly program with Nasm Intro With LInux With Windows Intro Netwide Assembler (NASM) is an assembler and disassembler for the Intel x86 architecture and is commonly used to create 16-bit, 32-bit (IA-32) and 64-bit...
WIN XP&DELL : How to create an installation CD (MASTER CD) ShowWIN XP&DELL : How to create an installation CD (MASTER CD)? For some, the installation CD of Windows XP are no longer included with Dell...
Ask your question Reply

1

mechengr, on Jun 17, 2008 9:24:08 am BST

I do have this virus too.pls help us.

   
Reply to mechengr

2

myx9, on Aug 16, 2008 12:33:55 pm BST

I have this virus is almost like this pls help us:D ...reply at horianormal@yahoo.com

   
Reply to myx9

3

skyhero, on Aug 23, 2008 12:42:10 am BST

Use nod32 business edition

google it....

   
Reply to skyhero

4

Frostyandy, on Aug 23, 2008 12:07:56 pm BST

OK so if you want to get rid of it you can not rely on any antivirus (yet).
I downloaded Total Commander, opened regedit (start->run->regedit->OK), click CTRL+ALT+DEL, in task mamager end the task named EXPLORER.EXE (your explorer will shut down, i.e. desktop, taskbar).
Now go into regedit under [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] delete the entries with kava,ckvo or similar.
Go to [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] set Hidden to 1.
Go to [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] and delete "NoDriveTypeAutoRun" = 145

Open your Total Commander. Go to Configuration->Options->Display. Enable Show hidden/system files.
Go to each of your drives with total Commander and delete the suspicious files(not folders). The names vary from system to system, so i opened my secondary partition(D:) first and the only files there were those infected so i deleted the same files on C:

Now you can open your windows explorer.
To further clean your PC go to C:\Windows\System32\. There delete the files named kavo or ckvo

I got a lot of the info from http://www.eset.eu/buxus/generate_page.php?page_id=18601
but my nod antivir could do nothing aginst the virus..it kept coming back, maybe next ver.

Hope it helps

   
Reply to Frostyandy

5

myx9, on Aug 25, 2008 7:39:50 am BST

10x but i have windows xp with sp3 and i follow u'r instructions and i didn't find in [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion­\Run],microsoft and about the eset i look myself on theier site:)
btw 10x 4 answers

   
Reply to myx9

6

myx9, on Aug 25, 2008 7:44:03 am BST

Srry man i have a error but i've restart the pc and i find it:) 10x:D

   
Reply to myx9

9

chinu, on Nov 30, 2008 12:43:14 pm GMT

Thank you very much Frostyandy....at has solved my problem

   
Reply to chinu

10

Lyliani, on Dec 3, 2008 12:29:39 am GMT

I love you. You saved my hidden files

   
Reply to Lyliani

7

manelizer, on Sep 26, 2008 8:36:58 am BST

After u have done what frostyandy said, u must also turn off all the restore points & restart. the autorun files of the trojan remain saved in those restore points.

   
Reply to manelizer

8

TheMan, on Oct 13, 2008 9:48:33 pm BST

USE SCANSPYWARE 3.8.1 http://www.scanspyware.net/

   
Reply to TheMan

11

 s3riouss, on Feb 6, 2009 10:05:33 am GMT

I had this too
i removed my hdd and scaned it on another computer
that got rid of it
remember to turn off your system restore

   
Reply to s3riouss
Ask your question Reply
They need your help