Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 93112 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

w32.Trats!inf infection, Vundo seems gone


  • Please log in to reply
53 replies to this topic

#31 Simon V.

Simon V.

    MRU Emeritus

  • Authentic Member
  • PipPipPipPip
  • 897 posts

Posted 19 January 2008 - 02:09 PM

Hi :)

Please copy and paste the text in the code box into Notepad (Go to Start > Run, type Notepad and hit Enter)

@echo off

ren "C:\WINDOWS\system32\urlmon.dll" "C:\WINDOWS\system32\urlmon.old"
copy /y  "C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE\urlmon.dll" "C:\WINDOWS\system32\urlmon.dll"
exit

Go to File > Save As:. Save the file as "FixFile.bat" (Including the quotes)

Double-click on FixFile.bat to run the file.

Reboot your computer.

Let me know whether that worked, and what problems remain.

    Advertisements

Register to Remove


#32 patnhank

patnhank

    Authentic Member

  • Authentic Member
  • PipPip
  • 31 posts

Posted 19 January 2008 - 02:24 PM

Simon, no change, ran fixfile, rebooted and still no internet.????

#33 Simon V.

Simon V.

    MRU Emeritus

  • Authentic Member
  • PipPipPipPip
  • 897 posts

Posted 19 January 2008 - 02:30 PM

Hi :)

Please try reinstalling Internet Explorer (link: http://www.microsoft...e/default.mspx).

#34 patnhank

patnhank

    Authentic Member

  • Authentic Member
  • PipPip
  • 31 posts

Posted 19 January 2008 - 02:34 PM

I did that earlier, install an additional time? Second time? OK, I am on it

#35 Simon V.

Simon V.

    MRU Emeritus

  • Authentic Member
  • PipPipPipPip
  • 897 posts

Posted 19 January 2008 - 02:39 PM

I did that earlier, install an additional time? Second time? OK, I am on it

Yeah, when that's done run FindFile.bat a second time and post the resultant log.

#36 patnhank

patnhank

    Authentic Member

  • Authentic Member
  • PipPip
  • 31 posts

Posted 19 January 2008 - 02:52 PM

SImon, Results AFTER 2nd installation of IE.7 and additional findfile search. Good luck and happy hunting.... ----------------------- Volume in drive C is OLD windows Volume Serial Number is 980A-B85D Directory of C:\WINDOWS\$hf_mig$\KB928090\SP2QFE 01/25/2007 06:24 AM 616,960 urlmon.dll 1 File(s) 616,960 bytes Directory of C:\WINDOWS\$hf_mig$\KB931768-IE7\SP2QFE 03/07/2007 11:40 AM 1,153,024 urlmon.dll 1 File(s) 1,153,024 bytes Directory of C:\WINDOWS\$hf_mig$\KB933566-IE7\SP2QFE 04/25/2007 03:08 AM 1,153,536 urlmon.dll 1 File(s) 1,153,536 bytes Directory of C:\WINDOWS\$hf_mig$\KB937143-IE7\SP2QFE 06/27/2007 08:40 AM 1,154,048 urlmon.dll 1 File(s) 1,154,048 bytes Directory of C:\WINDOWS\$hf_mig$\KB939653-IE7\SP2QFE 08/20/2007 04:02 AM 1,161,728 urlmon.dll 1 File(s) 1,161,728 bytes Directory of C:\WINDOWS\$hf_mig$\KB942615-IE7\SP2QFE 10/10/2007 05:47 PM 1,162,240 urlmon.dll 1 File(s) 1,162,240 bytes Directory of C:\WINDOWS\$NtServicePackUninstall$ 08/23/2001 05:00 AM 452,096 urlmon.dll 1 File(s) 452,096 bytes Directory of C:\WINDOWS\$NtUninstallKB834707-IE6-20040929.115007$ 08/23/2001 05:00 AM 452,096 urlmon.dll 1 File(s) 452,096 bytes Directory of C:\WINDOWS\$NtUninstallKB928090_0$ 08/04/2004 12:56 AM 601,088 urlmon.dll 1 File(s) 601,088 bytes Directory of C:\WINDOWS\ie7 01/25/2007 06:24 AM 616,960 urlmon.dll 1 File(s) 616,960 bytes Directory of C:\WINDOWS\ie7updates\KB933566-IE7 03/07/2007 11:45 AM 1,150,464 urlmon.dll 1 File(s) 1,150,464 bytes Directory of C:\WINDOWS\ie7updates\KB942615-IE7 08/13/2007 06:54 PM 1,162,240 urlmon.dll 1 File(s) 1,162,240 bytes Directory of C:\WINDOWS\ServicePackFiles\i386 08/04/2004 12:56 AM 601,088 urlmon.dll 1 File(s) 601,088 bytes Directory of C:\WINDOWS\system32 08/13/2007 06:54 PM 1,162,240 urlmon.dll 1 File(s) 1,162,240 bytes Directory of C:\WINDOWS\system32\dllcache 08/13/2007 06:54 PM 1,162,240 urlmon.dll 1 File(s) 1,162,240 bytes Total Files Listed: 15 File(s) 13,762,048 bytes 0 Dir(s) 10,671,292,416 bytes free

#37 patnhank

patnhank

    Authentic Member

  • Authentic Member
  • PipPip
  • 31 posts

Posted 19 January 2008 - 02:53 PM

STOP STOP STOP IE launched! What next? Kaspersky? Java?

#38 Simon V.

Simon V.

    MRU Emeritus

  • Authentic Member
  • PipPipPipPip
  • 897 posts

Posted 19 January 2008 - 02:56 PM

STOP STOP STOP IE launched! What next? Kaspersky? Java?

Glad to hear that :) First update Java, then run the Kaspersky Online Scan.

#39 patnhank

patnhank

    Authentic Member

  • Authentic Member
  • PipPip
  • 31 posts

Posted 19 January 2008 - 03:12 PM

Will take a bit to download and install. Are we getting near the end? What is your opinion on all the instability I had in December; multiple crashes, difficulty booting up on start up, Blue screen of Death, was a bit better after warming up if that matters. Overall it was driving us crazy, shutting down at the most inopportune times. Like I said I have a new hardware MB BioStar K8M800 Micro AM2R AMD/A64 X2 4000+ 2.1 G AM2 IGB new DII8000 RAM I guess I should install once the software virus issue resolved?

#40 patnhank

patnhank

    Authentic Member

  • Authentic Member
  • PipPip
  • 31 posts

Posted 19 January 2008 - 03:22 PM

Arrgghhh :wall: Crashed 30 seconds into the scan, installed without Kaspersky easily but then the crash will try again. Hope it was hardware related.

    Advertisements

Register to Remove


#41 Simon V.

Simon V.

    MRU Emeritus

  • Authentic Member
  • PipPipPipPip
  • 897 posts

Posted 19 January 2008 - 03:29 PM

Hope it was hardware related.

I don't, software issues are resolved more easily ;)

I have no idea about the instability you experienced previously. That could've been anything, and since I don't know the hardware and software situation at that moment, I can't say what happened.

You should wait with the hardware upgrades until after we're done. We're nearing the end, if the Kaspersky scan comes up clean, you should be good to go.

#42 patnhank

patnhank

    Authentic Member

  • Authentic Member
  • PipPip
  • 31 posts

Posted 19 January 2008 - 03:39 PM

Simon

I have no idea about the instability you experienced previously. That could've been anything, and since I don't know the hardware and software situation at that moment, I can't say what happened.

Yes, you have been most helpful and we won't go down that road... the hardware is sitting in a box and too many days have passed to return it. It will be a minor upgrade and I will WAIT a week or so to see if the software/virus issues are resolved before I install the hardware.

You should wait with the hardware upgrades until after we're done. We're nearing the end, if the Kaspersky scan comes up clean, you should be good to go.

At the end of the section/post regarding the Kaspersky you wanted copies of Combofix, Kaspersky online scan and a new HiJack this log. Do you still need all three or just the Kaspersky?

THanks
hank

#43 Simon V.

Simon V.

    MRU Emeritus

  • Authentic Member
  • PipPipPipPip
  • 897 posts

Posted 19 January 2008 - 03:44 PM

I already have the Combofix log, so you should only post the Kaspersky log and a new HijackThis log.

#44 patnhank

patnhank

    Authentic Member

  • Authentic Member
  • PipPip
  • 31 posts

Posted 19 January 2008 - 03:51 PM

Simon V, OK, two logs. Now Kaspersky is about 7 % complete at 24 minutes, it may speed up once it finishes laboring throught the C drive. SO far 6 viruses and 24 infeted objects. I suspect you will be fast asleep before this is complete. I will post when it is done, thanks for all your help today. Bon soir Hank

#45 patnhank

patnhank

    Authentic Member

  • Authentic Member
  • PipPip
  • 31 posts

Posted 19 January 2008 - 09:33 PM

Simon, the system is will not load windows....it starts to launch and then reboots from the bios. A blue screen appears telling me to check hardware, memory, the usual stuff I have had for the last 30 days. Hopeless.....ugh

Related Topics



5 user(s) are reading this topic

0 members, 5 guests, 0 anonymous users