Help

Welcome to your place for tech questions! ( Log In or Join today ) Get answers from experts today. (it's 100% free) Virus removal forum

What the Tech > Spyware / Malware / Virus Removal > Virus, Spyware & Malware Removal

Help, virus?

Options

OCD View Member Profile	Jan 3 2013, 12:10 AM Post #2
SuperMember Group: Malware Team Posts: 3,555 Joined: 19-June 06 From: Florida Member No.: 57,193 Operating System: Windows XP SP3, Windows 7	Hello jaimem22, My name is OCD. I would be more than happy to take a look at your log and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following: Please be advised, as I am still in training, all my replies to you will be checked for accuracy by one of our experts to ensure that I am giving you the best possible advice, this will be a team effort. This may cause a delay, but I will do my best to keep it as short as possible. Please bear with me, I will post back to you as soon as I can. I will be working on your Malware issues, this may or may not, solve other issues you have with your machine. The fixes are specific to your problem and should only be used for the issues on this machine. Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear. It's often worth reading through these instructions and printing them for ease of reference. If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry. Please reply to this thread. Do not start a new topic. IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so. DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your Operating System and losing all your programs and data. Important Note for Vista and Windows 7 users: These tools MUST be run from the executable.(.exe) every time you run them with Admin Rights (Right click, choose "Run as Administrator") Please stay with this topic until I let you know that your system appears to be "All Clear"

OCD View Member Profile	Jan 3 2013, 11:36 AM Post #3
SuperMember Group: Malware Team Posts: 3,555 Joined: 19-June 06 From: Florida Member No.: 57,193 Operating System: Windows XP SP3, Windows 7	Hi jaimem22, IMPORTANT NOTE: Unfortunately, one or more of the identified infections is a backdoor trojan. This allows hackers to remotely control your computer, steal critical system information and download and execute files. I would counsel you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation. Though the trojan has been identified and can be killed, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information: How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud? When Should I Format, How Should I Reinstall = = = = = = = = = = = = = = = = = = = = Reboot Your System using Last Known good Configuration If you are unable to boot your system using the Last Known Good Configuration, just continue with the remainder of the steps. Restart your computer. As soon as BIOS is loaded begin tapping the F8 key until the "Advanced Options" menu appears. Use the arrow keys to select the Last known good configuration menu item. Press Enter. Next Download aswMBR.exe and save it to your desktop. Right click and select "Run as Administrator". When asked if you want to download Avast's virus definitions please select Yes. Click Scan Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet. You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well. Next The following tool may give you the option of removing any malicious items that are found. At this point please do not allow the tool to remove anything. We only need to review the log at this time. TDSS Killer Please read carefully and follow these steps. Download TDSSKiller and save it to your Desktop. Extract its contents to your desktop. Once extracted, open the TDSSKiller folder and Right click on TDSSKiller.exe and select "Run as Administrator" to run the application. When the window opens, click on Change Parameters. Under ”Additional options”, put a check mark in the box next to “Detect TDLFS File System”. Click on Start Scan. If an infected file is detected, the default action will be Cure, click on SKIP. If a suspicious file is detected, the default action will be Skip, click on Continue. It may ask you to reboot the computer to complete the process. Click on Reboot Now. If no reboot is required, click on Report. A log file should appear. Please copy and paste the contents of that file here. If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here. In your next post please provide the following: aswMBR log TDSSKiller log

OCD View Member Profile	Jan 6 2013, 10:46 AM Post #4
SuperMember Group: Malware Team Posts: 3,555 Joined: 19-June 06 From: Florida Member No.: 57,193 Operating System: Windows XP SP3, Windows 7	Hi jaimem22, Just checking in to see if you still need help?

JonTom View Member Profile	Jan 9 2013, 01:26 AM Post #5
SuperMember Group: Classroom Teacher Posts: 4,636 Joined: 5-February 09 From: UK Member No.: 84,008 Operating System: Vista Home Premium, 64-bit, SP2	Due to lack of response, this topic has been closed. If you need continued support, please begin a new thread.

« Next Oldest · Virus, Spyware & Malware Removal · Next Newest »

1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)

0 Members:

Display Mode: Standard · Switch to: Linear+ · Switch to: Outline

Track this topic · Email this topic · Print this topic · Subscribe to this forum

Time is now: 24th May 2013 - 12:49 PM

Advertisements do not imply our endorsement of that product or service. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk.
Member site: Alliance of Security Analysis Professionals | UNITE Against Malware
© Geeks to Go, Inc. | All Rights Reserved | Privacy Policy