[Resolved] trojan:win32/renos.n
#1
Posted 30 September 2009 - 06:40 AM
Register to Remove
#2
Posted 30 September 2009 - 10:59 AM
Please do the following:
Please download exeHelper to your desktop.
Double-click on exeHelper.com to run the fix.
A black window should pop up, press any key to close once the fix is completed.
Post the contents of log.txt (Will be created in the directory where you ran exeHelper.com)
Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).
NEXT
To fix the permission issue
Download Inherit and save it to your desk top
Drag each of the exe files that you are unable to run into Inherit.exe (must be the exe - not the shortcut)
Then wait for it to say "OK"
NEXT
- Please save Win32kDiag to your desktop.
- Double-click on it to run a scan.
- When it's finished, there will be a log called Win32kDiag.txt on your desktop.
- Please open it with notepad and post the contents here.
Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015
#3
Posted 30 September 2009 - 07:57 PM
#5
Posted 01 October 2009 - 07:38 AM
#6
Posted 01 October 2009 - 10:04 AM
Tools->Options->Main tab
Set to "Always ask me where to Save the files".
Then make sure you choose "Desktop" as the location to save the files
Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015
#7
Posted 01 October 2009 - 03:57 PM
Edited by entropy1120, 01 October 2009 - 04:00 PM.
#8
Posted 01 October 2009 - 04:09 PM
Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015
#9
Posted 01 October 2009 - 04:16 PM
#10
Posted 01 October 2009 - 05:36 PM
Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015
Register to Remove
#11
Posted 01 October 2009 - 07:10 PM
#12
Posted 01 October 2009 - 07:14 PM
The inherit program should resolve that, but if you cannot save anything to your computer it is going to be more difficult.
If you have access to another computer please download the following program to the other computer and transfer it to the infected computer via USB - run the program from the USB.
Download Combofix from either of the links below. You must rename it to combo-fix.com before saving it.
Save it to your desktop.
**Note: In the event you already have Combofix, delete it, this is a new version that I need you to download. It is important that it is saved and renamed following this process directly to your desktop**
- If you are using Firefox, make sure that your download settings are as follows:
- Tools->Options->Main tab
- Set to "Always ask me where to Save the files".
Link 1
Link 2
-----------------------------------------------------------
- Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
- Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
-----------------------------------------------------------
- NOTE: If ComboFix asks to install the Recovery Console, please ALLOW it to do so.
-----------------------------------------------------------
- Double click on the renamed ComboFix.exe & follow the prompts. When finished, it will produce a report for you.
- Please post the C:\ComboFix.txt so we can continue cleaning the system.
-----------------------------------------------------------
Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015
#13
Posted 01 October 2009 - 07:19 PM
#14
Posted 01 October 2009 - 07:30 PM
Microsoft MVP 2010, 2011, 2012, 2013, 2014, 2015
#15
Posted 01 October 2009 - 07:31 PM
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users