23 replies to this topic

[say-no-2-trojans]

Seems ok - no more of those warnings and the file that they kept referring to is no longer there.

Are we all cured?

[ken545]

What I like to do to be sure all is gone is to run a free online virus scanner from ESET, I have seen this complete in 20 minutes or so and some systems maybe over an hour so be patient

 

First do this

 

Double click on AdwCleaner.exe to run the tool again.

Click on the Uninstall button.

Click Yes when asked are you sure you want to uninstall.

Both AdwCleaner.exe, its folder and all logs will be removed.

 

 

 

 

Read the instructions carefully and besure to uncheck removing found threats because sometimes they pick up false positives and I dont want it removing anything that does not need to be removed

 

 

ESET Online Scanner

I'd like us to scan your machine with ESET OnlineScan

 

*Note

It is recommended to disable onboard antivirus program and antispyware programs while performing scans so there are no conflicts and it will speed up scan time.

Please don't go surfing while your resident protection is disabled!

Once the scan is finished remember to re-enable your antivirus along with your antispyware programs.

 

Hold down Control and click on the following link to open ESET OnlineScan in a new window.

ESET OnlineScan

Click the button.

For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)

Click on to download the ESET Smart Installer. Save it to your desktop.

Double click on the icon on your desktop.

Check

Click the button.

Accept any security warnings from your browser.

Check

Make sure that the option "Remove found threats" is Unchecked

Push the Start button.

ESET will then download updates for itself, install itself, and begin

scanning your computer. Please be patient as this can take some time.

When the scan completes, push

Push , and save the file to your desktop using a unique name, such as

ESETScan. Include the contents of this report in your next reply.

Push the button.

Push

Please make sure you include the following items in your next post:

The log that was produced after running ESET Online Scanner.

[say-no-2-trojans]

C:\ProgramData\ddc24aa9-6c5d-44d0-8c40-9bed83bb2ab7\maintainer.bak Win32/BrowseFox.V potentially unwanted application
C:\Users\All Users\ddc24aa9-6c5d-44d0-8c40-9bed83bb2ab7\maintainer.bak Win32/BrowseFox.V potentially unwanted application
 

[ken545]

Not to bad , just a few backups 

 

Open notepad (Start --> All Programs --> Accessories --> Notepad).

Please copy the entire contents of the code box below.

(To do this highlight the contents of the box, right click on it and select copy. Right-click in the open notepad and select Paste).

Save it to the same directory as FRST or FRST64 as fixlist.txt. (it has to be right next to FRST or FRST64) either in a directory you saved FRST or FRST64 or on your desktop if thats where you saved it.

You can use your mouse to drag Fixlist right next to FRST or FRST64, either above or below it but not on top of it.

 

Start
CloseProcesses:
C:\ProgramData\ddc24aa9-6c5d-44d0-8c40-9bed83bb2ab7\maintainer.bak
C:\Users\All Users\ddc24aa9-6c5d-44d0-8c40-9bed83bb2ab7\maintainer.bak
EmptyTemp:
End

 

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

 

Then open FRST or FRST64 and click on fix

When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

[say-no-2-trojans]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 09-11-2014 01
Ran by Dave Moss at 2014-11-12 19:00:57 Run:2
Running from C:\Users\Dave Moss\Desktop
Loaded Profile: Dave Moss (Available profiles: Dave Moss)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
C:\ProgramData\ddc24aa9-6c5d-44d0-8c40-9bed83bb2ab7\maintainer.bak
C:\Users\All Users\ddc24aa9-6c5d-44d0-8c40-9bed83bb2ab7\maintainer.bak
EmptyTemp:
End
*****************

Processes closed successfully.
C:\ProgramData\ddc24aa9-6c5d-44d0-8c40-9bed83bb2ab7\maintainer.bak => Moved successfully.
"C:\Users\All Users\ddc24aa9-6c5d-44d0-8c40-9bed83bb2ab7\maintainer.bak" => File/Directory not found.
EmptyTemp: => Removed 82.1 MB temporary data.

The system needed a reboot.

==== End of Fixlog ====

[ken545]

Good, looks like your on your way, glad all is well again

 

 

Please download DelFix and save the file to your Desktop.

 

 

•  

• Windows XP Double Click DelFix.exe to run the program. 

• Windows Vista > Win 7 > Win 8 Right Click on DelFix.exe and select RUN AS ADMINISTRATOR 

• Checkmark " Remove Disinfection Tools"

• Click the Run button

 

 

This will remove the specialised tools we used to clean your system. Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually

 

 

 

==========================================================

 

 

 

•  

How did I get infected in the first place ?    

Read these links and find out how to prevent getting infected again.

• Tutorial for System Restore <-- Do this first to prevent yourself from being reinfected.

• WhattheTech

• Grinler BleepingComputer

• GeeksTo Go

• Dslreports

 

 

 

Safe Surfn

Ken

[say-no-2-trojans]

Thanks for all your help.

Once again you guys have saved the day

Cheers

[ken545]

[ken545]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatth...ed_t106388.html
and start a New Topic.