This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] PROXY-X TROJAN , very unstably laptop

28 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Ive downloaded it to USB stick,

Im also going to download spybot and AVG, whilst im at the library.

is there any other downloads i might need ?

Whilst im at the library. and able to download

B) Ill stick them on the stick too.

That should do it :thumbup:
here is a record of whats happened so for.

I plug my USB in and copy and paste the Combfix to my desktop .

Having renamed it abcd.exe beforehand.

It copies, but doesnt showup.

So I rename it something random.

Copy that over , that also appear to copy but doesnt show up either.

I try this a few times

Same result.

I try copying a picture from my USB stick to the desktop , that shows up.

I then try copying theoriginal ABCE.exe

And I get an message , file already exists and the options to decline/ copy anyway / copy and rename to abcde (2).exe

this time it copies over and shows up.

I click on it, a command window opened briefly then closes, since then nothing happened,.

i dont think it ran.

So to sum up.

I hink my desk top has a few combfix icons on it, they are just not showing.

Im going to clear the java thing again .

See if that helps things along.
ok im going to run the file thats named combfix.exe first . then the abcd one , then the qwerty one .if i still have a laptop

[external image: Posted Image]
Tried Running it from the USB (combfix.exe then ABCD.exe . then qwerty.exe ) A command window opens briefly then closes . It opens and closes so fast , the human eye cant see what it said. Gee
I used my onscreen camera to record what the window said. Played it back and froze it on the cmd window. It just the combfix program trying to start and exiting immediately, as expected i suppose.
  • Now physically disconnect from the internet and STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields)
  • Click on your START button and choose Run. Then copy/paste the entire content of the following quotebox (Including the "" marks and the Symbols) into the run box.

    Go to [external image: Posted Image] -> Run -> copy/paste in the following single line command & click OK

    "%userprofile%\desktop\combofix.exe" /killall


    [external image: Posted Image]
  • Click OK and this will start ComboFix in a special way.
  • When finished, it will produce a log. Please save that log to a Notepad File to post in your next reply along with a fresh HJT log.

Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.

* After you have saved the logs, restart your system to re-enable all the programs that were disabled during the running of ComboFix.

* Reconnect to the internet

* Post the following logs/Reports:
  • ComboFix.txt
disconnected and tried . combfix opens and closes immediately. Shall I change the path to the USB stick ? Also Im thinking of re-booting and trying again. there are files waiting to be updated when I shut down. Also , someone is coming to pick me up and take me to my vehicle .MI may be gone for some time.
hello, I dont know the correct way to write "%userprofile%G:\ABCD.exe\combofix.exe" /killall Im getting a syntax error , I cant work out how to correctly point to the g:\ drive. where combofix is on my usb stick. also , I still cant download anything to my desktop , nor get combofix or abcd or any other random name to run after rebooting. I cant even download AVG nor get it to install from my stick ! My lapto is running ok, , no crashes , but ive got no protection whatso ever.
Using Internet Explorer or Firefox, visit Kaspersky On-line Scanner

1. Click Accept, when prompted to download and install the program files and database of malware definitions.
2. To optimize scanning time and produce a more sensible report for review:
  • Close any open programs
  • Turn off the real time scanner of any existing antivirus program while performing the online scan
3. Click Run at the Security prompt.
The program will then begin downloading and installing and will also update the database.
Please be patient as this can take quite a long time to download.
  • Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
  • Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
  • Do NOT be alarmed by what you see in the report. Many of the finds have likely been quarantined.
  • Click View scan report at the bottom.

    [external image: Posted Image]
  • Click the Save as Text button to save the file to your desktop so that you may post it in your next reply
——————————————————————————– KASPERSKY ONLINE SCANNER 7.0: scan report Monday, January 25, 2010 Operating system: Microsoft Windows Vista Home Premium Edition, 32-bit (build 6000) Kaspersky Online Scanner version: 7.0.26.13 Last database update: Monday, January 25, 2010 05:50:02 Records in database: 3367679 ——————————————————————————– Scan settings: scan using the following database: extended Scan archives: yes Scan e-mail databases: yes Scan area - My Computer: C:\ D:\ E:\ F:\ G:\ Scan statistics: Objects scanned: 182806 Threats found: 2 Infected objects found: 3 Suspicious objects found: 0 Scan duration: 02:33:36 File name / Threat / Threats count C:\Users\charlie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JPKZNRYL\show_ads[1].js Infected: Trojan.JS.Redirector.ar 1 C:\Users\charlie\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UE9UJE8K\show_ads[1].js Infected: Trojan.JS.Redirector.ar 1 C:\Users\charlie\Downloads\mirc635.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.g 1 Selected area has been scanned.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI