Hi All,
I came to you once before with a problem and swear by your knowledge and help.
My mom's computer recently got infected with the Koobface worm and a few other nasty trojans and hijacks also latched onto them as well. I ran Malwarebytes and ran McAfee scans. I also disabled restore points and rescanned as well. Mcafee and MBAM were coming up clean but I looked on this site to find a good online scanner and found ESET Online Scanner and it came up with 1 threat so far (still scanning). The threat is labled as "probably a variant of Java/TrojanDownloader.Agent.AB trojan.
On top of this symptoms include
- USB wireless mouse not being recongized outside of safe mode, chrome launching
- Chrome not connecting to the internet and then using up all remaining processor and not being able to be closed
- Can not change settings in MSConfig
- Not sure if this is related or not but I have dropbox installed and had Keepass installed and i kept getting notifications that keepass.db.lock was added to the folder making me feel somebody or something may be accessing the KeePass database.
Any suggestions would be greatly appreciated. Thank you in advance
Avid_user
Hi and Welcome,
Please do the following:
Please download
DDS from either of these links
LINK 1 LINK 2
and save it to your
desktop.
Disable any script blocking protection Double click dds.pif to run the tool. When done, two DDS.txt's will open. Save both reports to your desktop. —————————————————
Please include the contents of the following in your next reply:
DDS.txt
Attach.txt .
NEXT
Download
GMER Rootkit Scanner from
here to your desktop. It will be a randomly named executable.
Double click the exe file. If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO , then use the following settings for a more complete scan.[external image: Posted Image] Click the image to enlarge it In the right panel, you will see several boxes that have been checked. Ensure the following are unchecked IAT/EAT Drives/Partition other than Systemdrive (typically C:\) Show All (don't miss this one) Then click the Scan button & wait for it to finish. Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post. Save it where you can easily find it, such as your desktop, and attach it in reply. **Caution**
Hi CatbyteDDS.txt
you can zip and attach the attach.txt in future, that would be fine, doesn't have to be sent privately
please try running GMER in safe mode with just "sections" and the "C:\" drive checked
if it still won't run, please try running this program
Please download
this file, and save it to your Desktop. Once you have downloaded it, save and close all other programs and run it by double-clicking on the file named "RootRepeal.exe".
Once the main window shows up, please click on the "Report" button on the bottom of the window. Next, please click the "Scan" button.
Another window will pop up asking you to select what to include in the scan. Please uncheck everything except for the "Stealth Code" checkbox, and then click OK.
Once the program has finished scanning, the results will appear. Click on the "Save Report" button, and save the report to your desktop.
Finally, please open this report with Notepad, and post it here.
Due to inactivity this topic will be closed.
If you need help please start a new thread.
New members follow the instructions here
http://forums.whatthetech.com/you_Infected_t106388.html and start a new topic
![[external image: Posted Image]](http://i582.photobucket.com/albums/ss269/Cat_Byte/GMER/gmer_screen2-1.gif){kind=link}