Hi jster171,
Don't worry when HijackThis says "file missing" as it's not always correct. The two Avast files which HijackThis reports as 'missing' are present in the running processes so they most definitely aren't 'missing'!
————————————————————————
Please open this page in your browser:
http://www.bleepingcomputer.com/submit-mal….php?channel=32
Fill in the
link to topic field with a link to this topic
Copy/paste the following into the
Browse to the file you want to submit field:
C:\Documents and Settings\Jason\Local Settings\Temporary Internet Files\Content.IE5\TCYZZDQ3\MCW[1].exe
Then press
Send File, this will upload the file for analysis
————————————————————————
Download SmitfraudFix (by S!Ri) to your Desktop (right-click the link, select
Save Target As…, select your Desktop and press
Save):
http://siri.urz.free.fr/Fix/SmitfraudFix.exe
Double-click
SmitfraudFix.exe
Select
option #1 - Search by typing
1 and press Enter
This program will scan large amounts of files on your computer for known patterns so please be patient while it works. When it is done, the results of the scan will be displayed and it will create a log named
rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed.
IMPORTANT: Do NOT run any other options until you are asked to do so!
If the tool fails to launch from the Desktop, please move
SmitfraudFix.exe directly to the root of the system drive (usually C: ), and launch from there.
Note:
process.exe is detected by some antivirus programs as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user. Further info is available
here.
————————————————————————
Download
Deckard's System Scanner (DSS) to your Desktop (right-click the link, select
Save Target As…, select your Desktop and press
Save)
- Close all applications and windows.
- Double-click on dss.exe to run it, and follow the prompts.
- When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt<-this one will be minimized
- Make sure Format->Word Wrap is unchecked
- Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt and extra.txt in your reply
Once complete, please post the SmitfraudFix report and
both DSS logs, you won't need to produce a new HijackThis log as DSS produces one for you.
