Hello teachers, C:\WINDOWS\system32\basfipm.exe C:\WINDOWS\TEMP\CX609C.EXE C:\WINDOWS\system32\ZCfgSvc.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://smbusiness.dellnet.com/ O2 - BHO: (no name) - {72932770-D0F7-4924-8755-F5A6191D1CB2} - C:\WINDOWS\System32\diigom.dll (file missing) O2 - BHO: (no name) - {D1CD1D3E-77D8-5E66-C7CC-DEDD603B06F6} - C:\WINDOWS\system32\croh.dll (file missing) O15 - Trusted Zone: *.skoobidoo.com
You should not attempt to fix this. There are only a very few that are trained to remove it as it is a nasty infection. You should ask eithe dosling or daemon for assistance.
Thanks Siggyx, Should I repost this in the regular forum or PM one of them?
Sky
OK, start with this - click
here to download ServiceFilter, a little script by rand1038 that reveals potential unauthorised running services in your system. Download, unzip and double-click ServiceFilter.vbs (you may need to enable your antivirus program to run the file). This script will create a text file named Post_This.txt in the same folder as the script itself has been saved - copy and paste the contents of Post_This.txt in your next reply here.
Many Thanks for your assistance, never thought I'd be learning about AB problems from our own computer!
If it's any consolation, you don't appear to be infected - let's clean you up and see what happens. If it comes back we'll have to dig a little deeper.R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank CX609C.EXE
Hi Daemon,
Update:C:\WINDOWS\TEMP\MED552.EXE
Sky,
Does the "windows\temp" file have a "doggie icon" associated with it, as shown in
this post ?
If so, it's not malware, but related to another program on your machine.
Here is a link to get your desktop back into shape:
http://www.smart-security.info/removal.html
Hi Micah : 68 –
Yes the file does have the little Doggie Icon – So I guess all is okay?
I read through the post - Only thing is I don't have this C:\programfiles\Officescan\PCCwin97.exe program or file on my computer. Is that okay?
MANY THANKS for all your help–
Sky
Actually, I think it's related to this software:
C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe
I didn't mean to "barge in".
You can barge in anytime you want!!
Yes, I think your right! When I go to that directory, I see the same little green dog!
Well I'll be doggone!
At any rate everything seems to be okay now, glad I learned about the Temp file and thanks for the desktop cleanup link!
Many Thanks to both you and Daemon for all your help. Now I can get back to helping others…
Kindest Regards,
Sky
Feel free to barge - I've learned something also
I'll contact you later about that doggie
As this problem has been resolved the topic will be closed. If you need this topic reopened, please request this by sending an email to us at the following link
(Click for address)
The subject of the email must be "Reopen" . Include your post username and details about why you need it reopened, with a valid link to your post.
At any rate everything seems to be okay now, glad I learned about the Temp file and thanks for the desktop cleanup link!
Many Thanks to both you and Daemon for all your help. Now I can get back to helping others…
Kindest Regards,
Sky
