Unknown StartUp Program

Drdonelittle · 26 May 2013

Hi I am running Windos 7 Ultimate on a HP laptop and just found this start up program. SxfRvnpy. I can't get any info on youtube or Google about it. Should I disable it on start up?
I recently tried to reinstall w7 but it would not work. I had a virus called ramnit.L and I tried several ways to get rid of it even trying to wipe the C disk from another temp partition with antoher w7 os on it. It didn't work and when I used DBAn to wipe the drive it took 20 hrs and in the end did not work. I am just wondering if this is something to do with that virus. BTW I think I managed to manaually rid myself of the virus as its no longer being detected.
Any advice would be much appreciated.
Thanks
DrD

josearedux · 26 May 2013

When you say Dban did not work does that mean that it did not completely wipe the drive clean? For now I would run msconfig and disable the aforementioned program. When you run your virus scan are you doing it in safe mode?

brianzion · 26 May 2013

hi :)

if you can download this program and install and run we can see in more detail what you have running autoruns from microsoft sysinternals

autoruns link

Jacee · 26 May 2013

Encyclopedia entry: Win32/Ramnit - Learn more about malware - Microsoft Malware Protection Center

Did you change ALL passwords? Win32/Ramnit makes copies of the installer to removable drives as a random file name. Are you using an infected flash drive, or an infected backup?

Drdonelittle · 27 May 2013

Hi, thanks for the replies. I have changed as many passwords as I can think of. I ran DBAN and my OS was not touched. I made a partition and tried to format the C drive from the new partition but alas it did not work either.
I have downloaded and ran autoruns. Should I upload a screenshot?
By the way I forgot to mention I have disabled two add ons in explorer. One is Zoomdownloader tool bar and the other is solid savings. I followed a tutorial on how to manually get rid of these virus's but they are still appearing on the add on features.
Once again thanks for the help.

Jacee · 27 May 2013

Download AdWareCleaner AdwCleaner Download to your desktop
1.Right-click on adwcleaner.exe and select Run As Administrator to launch the application.
2.Click on Delete button.
3.Confirm each time with OK.
4.Your computer will be rebooted automatically. A text file will open after the restart. Please post the content of that logfile in your reply.
Note: You can find the logfile at C:\AdwCleaner[Sn].txt as well - n is the order number.