Comments on: Hard to Kill Malware: Wintems.exe, Hldrrr.exe and Random Number.exe http://www.siusic.com/wphchen/hard-to-kill-malware-wintems-exe-and-hldrrr-exe-random-number-exe-143.html Random thoughts and news by Andrew Chen and friends Thu, 09 Feb 2012 13:53:45 +0000 http://wordpress.org/?v=2.5 By: ohi http://www.siusic.com/wphchen/hard-to-kill-malware-wintems-exe-and-hldrrr-exe-random-number-exe-143.html#comment-96169 ohi Tue, 06 Jul 2010 20:44:54 +0000 http://www.siusic.com/wphchen/hard-to-kill-malware-wintemsexe-and-random-number-executables-143.html#comment-96169 I had the same problem.All you need to do is here: step 1:download and install unlocker (if you can't delete malware files.I'am useing 1.9.0 version) step 2:find malware files location step 3:go to start>all programs>unlocker>start unlocker step 4:browse for malware files step 5:on slide menu select delete step 6:error window will show with text :"the object could not be deleated.Do you want to preform re..." step 7:select yes step 8:when you restart your computer the file will be deleted. I hope this helped you. I had the same problem.All you need to do is here:

step 1:download and install unlocker (if you can’t delete malware files.I’am useing 1.9.0 version)
step 2:find malware files location
step 3:go to start>all programs>unlocker>start unlocker
step 4:browse for malware files
step 5:on slide menu select delete
step 6:error window will show with text :”the object could not be
deleated.Do you want to preform re…”
step 7:select yes
step 8:when you restart your computer the file will be deleted.

I hope this helped you.

]]> By: johneeasthanacyuood http://www.siusic.com/wphchen/hard-to-kill-malware-wintems-exe-and-hldrrr-exe-random-number-exe-143.html#comment-74687 johneeasthanacyuood Tue, 17 Nov 2009 14:31:00 +0000 http://www.siusic.com/wphchen/hard-to-kill-malware-wintemsexe-and-random-number-executables-143.html#comment-74687 Thats cool. I agree, that was a good post!Dude a friend of mine get a Black MacBook Air. infact some of my freinds told me that they were able to get Free Laptops. Its not a scam, yes we can win Free notebook computers. there are lot of brands of Free notebook computers and Free Laptops. you can get [url=http://new-exclusive-offers.com/Free-Laptop/]Free laptop notebook[/url][b][/b] so my suggestion check this out you may [url=http://new-exclusive-offers.com/Free-Laptop/]Get best Free Laptops.[/url][b][/b] Thats cool. I agree, that was a good post!Dude a friend of mine get a Black MacBook Air. infact some of my freinds told me that they were able to get Free Laptops. Its not a scam, yes we can win Free notebook computers.
there are lot of brands of Free notebook computers and Free Laptops.

you can get [url=http://new-exclusive-offers.com/Free-Laptop/]Free laptop notebook[/url][b][/b]

so my suggestion check this out you may [url=http://new-exclusive-offers.com/Free-Laptop/]Get best Free Laptops.[/url][b][/b]

]]> By: Compalusa.com Has The Best Financial Crisis Proof Business: TDSS Malware » Siusic Dot Com http://www.siusic.com/wphchen/hard-to-kill-malware-wintems-exe-and-hldrrr-exe-random-number-exe-143.html#comment-53557 Compalusa.com Has The Best Financial Crisis Proof Business: TDSS Malware » Siusic Dot Com Thu, 05 Mar 2009 08:18:50 +0000 http://www.siusic.com/wphchen/hard-to-kill-malware-wintemsexe-and-random-number-executables-143.html#comment-53557 [...] in the following registry keys so that they could be launched on boot time. I went ahead and use a rootkit detecting tools. But nothing was [...] […] in the following registry keys so that they could be launched on boot time. I went ahead and use a rootkit detecting tools. But nothing was […]

]]> By: kostas http://www.siusic.com/wphchen/hard-to-kill-malware-wintems-exe-and-hldrrr-exe-random-number-exe-143.html#comment-38475 kostas Wed, 24 Sep 2008 22:01:23 +0000 http://www.siusic.com/wphchen/hard-to-kill-malware-wintemsexe-and-random-number-executables-143.html#comment-38475 Hi everyone I had the same problem, and this blog was of great help. I tested everything; the solution that worked form me was: 1. to use RootKit Revealer so as to stop all services and clear files infected 2. use EliBagla afterwards and after rebooting clean the rest of the files. Everything is OK now!!! Boy, this virus was a nightmare!!! Hi everyone

I had the same problem, and this blog was of great help.

I tested everything; the solution that worked form me was:
1. to use RootKit Revealer so as to stop all services and clear files infected
2. use EliBagla afterwards and after rebooting clean the rest of the files.

Everything is OK now!!! Boy, this virus was a nightmare!!!

]]> By: Jonathan http://www.siusic.com/wphchen/hard-to-kill-malware-wintems-exe-and-hldrrr-exe-random-number-exe-143.html#comment-35846 Jonathan Wed, 03 Sep 2008 15:27:14 +0000 http://www.siusic.com/wphchen/hard-to-kill-malware-wintemsexe-and-random-number-executables-143.html#comment-35846 I wish I had known about this blog 2 weeks ago. I did the removal myself and thoroughly cursed the villains who created this nasty bug. Comodo Pro tipped me off because it showed (briefly) the hldrrr.exe executable name before my AV was disabled. I hacked the registry to remove all instances of hldrrr. Finally (after more cursing and exploring) my AV came back but all was disabled. Once I enabled it again I ran a full scan which turned up 36 infected files. almost all were numbered, like A0***** something. All seems to be well now. I will print this blog and review it carefully in case there was something I missed. This bug is really horrible! I wish I had known about this blog 2 weeks ago. I did the removal myself and thoroughly cursed the villains who created this nasty bug. Comodo Pro tipped me off because it showed (briefly) the hldrrr.exe executable name before my AV was disabled. I hacked the registry to remove all instances of hldrrr. Finally (after more cursing and exploring) my AV came back but all was disabled. Once I enabled it again I ran a full scan which turned up 36 infected files. almost all were numbered, like A0***** something. All seems to be well now.
I will print this blog and review it carefully in case there was something I missed. This bug is really horrible!

]]>