Answers to your tech questions
Computer forums for help with removing malicious software (malware) and improving computer security

grin Welcome to What the Tech! ( Log In | Register ) What tech support ought to be... Fast, friendly and free! Once registered - you'll have the ability to post your question in the appropriate forum below. Additionally, if you can assist another member by sharing your tech knowledge, please post a reply! Best of all - Registration and all assistance is FREE! Once you've completed registration, simply choose the appropriate forum below, click on the "new topic" button, and post your question! What are you waiting for? Register today! *Registered users see NO ADVERTISING.

   
 
 Closed TopicStart new topic
> [Closed] Facebook Virus / Trojan.win32.Agent.clsj, How can I delete viral files from my Dell D610
cold666pack
post Jun 12 2009, 10:03 AM
Post #1


New Member
*

Group: New Member
Posts: 1
Joined: 12-June 09
From: Studio City, California
Member No.: 86,230
Operating System: Windows XP Professional Version 2002 Service Pack 2
A couple of day's ago I made a huge mistake and clicked on a video that an aquaintance sent me via facebook. I know it was a very foolish thing to do, and I'm done beating myself over the head, but now I need help removing it. I read about it and it seems it has been around for a while now, but the forums say to go to your windows directory and find files that are either tmark2.dat and/ or mstre6.exe files and delete them. But, I can not find these files in my windows directory.

After running a McAfee full scan and finding the virus was still very present, I ran a ParetoLogic Anti-Virus Plus which also took a very long scan on my stuff and hours later displays that I have 38 items total that have been detected, most just a bunch of cookies, but the last 3 it displays are:

Obfuscated AAX Trojan
Trojan-Downloader.win32.Fraudload.eki
Trojan.Win32.Agent.clsj

I went back to my windows directory to look for these so I could manually delete them, but have been unable to find them. Then, I also searched the internet and found some websites list these as fake detractors that fake anti0spyware sites use to try and get you to purchase their spyware for $40.

There's definately something on my computer, but its difficult to conclude which is the best route to take. Can anyone here advise me the best (and least costly) course of action. I am on my bf's laptop which is not infected, seeking help All constructive guidance is welcome and greatly appreciated.

Gratefully, C6P

UPDATE - i dont know what I did wrong, but not even a single view on my topic? I musta done something wrong. Where to properly post????

This post has been edited by cold666pack: Jun 12 2009, 12:40 PM
Go to the top of the page
 
+Quote Post
Essexboy
post Jun 12 2009, 01:10 PM
Post #2


SuperMember
Group Icon

Group: Classroom Teacher
Posts: 1,381
Joined: 8-November 08
From: Darkest Cornwall
Member No.: 82,302
Operating System: Vista Ultimate
Windows 7
Hi there - we get to everyone as and when we can

To ensure that I get all the information this log will need to be attached (instructions at the end) if it is to large to attach then upload to Mediafire and post the sharing link.

Download OTS to your Desktop
  • Close ALL OTHER PROGRAMS.
  • Double-click on OTS.exe to start the program.
  • Check the box that says Scan All Users
  • Check the box that says 64 bit
  • Under Additional Scans check the following:
    • File - Lop Check
    • File - Purity Scan
    • Evnt - EvtViewer (last 10)
  • Now click the Run Scan button on the toolbar.
  • Let it run unhindered until it finishes.
  • When the scan is complete Notepad will open with the report file loaded in it.
  • Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.

Please attach the log in your next post.

To attach a file, do the following:
  • Click Add Reply
  • Under the reply panel is the Attachments Panel
  • Browse for the attachment file you want to upload, then click the green Upload button
  • Once it has uploaded, click the Manage Current Attachments drop down box
  • Click on to insert the attachment into your post
Go to the top of the page
 
+Quote Post
Essexboy
post Jun 17 2009, 02:44 AM
Post #3


SuperMember
Group Icon

Group: Classroom Teacher
Posts: 1,381
Joined: 8-November 08
From: Darkest Cornwall
Member No.: 82,302
Operating System: Vista Ultimate
Windows 7
Due to inactivity this topic will be closed.
If you need help please start a new thread and post a new HJT log
Go to the top of the page
 
+Quote Post
« Next Oldest · Infections Removal · Next Newest »
 

Closed TopicStart new topic
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:

 
RSS Time is now: 7th November 2009 - 03:19 PM
Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk.
Member site: Alliance of Security Analysis Professionals | UNITE Against Malware
Memory Forums | Auto Repair Forum
© Geeks to Go, Inc. | All Rights Reserved | Privacy Policy
Powered By IP.Board © 2009  IPS, Inc.