Malwareteks: Forums / Inactive Malware Threads / [INACTIVE] Help (virus)

Forums

Malwareteks :: Forums :: Malware Support :: Inactive Malware Threads		<< Previous thread \| Next thread >>
[INACTIVE] Help (virus)


Moderators: ShadowPuterDude, Greg, D3m3nt3d, Brandon, Vmarm, peterparker, siljaline, jholland1964, TurcoLoco, Windsor, JeanInMontana, KZ, RatHat, Jason Amison, MrCharlie	This thread is now closed

Author

Post

Kedzi

Thu Aug 21 2008, 04:09PM

Registered Member #294

Joined: Thu Aug 21 2008, 04:04PM
Posts: 1
Thanked 0 times in 0 post

Hey guys, I got this thing appearing when I am in explorer.exe and I press the ''up'' or ''back'' button.

Here is my log file...(Hijackthis)

hijackthis.log

ShadowPuterDude

Thu Aug 21 2008, 05:24PM

...the Shadow knows

Registered Member #1

Joined: Thu Apr 27 2006, 04:52PM
Location: Northern NY
Posts: 217
Thanked 10 times in 10 posts

Download FixIEDef by ShadowPuterDude to the Desktop.

Disable real-time protection that can interfer with FixIEDef:

Disable Windows Defender until the computer is clean

Open Windows Defender
Select Tools and then General Settings
Under Real Time Protection Options uncheck Turn on real-time protection
Select Save

Don't forget to re-enable it, when your computer is clean.

Disable SUPERAntiSpyware until the computer is clean

Right-click on the shortcut from the system tray
Choose View Control Center (preferences/options)
On the General and Startup tab, uncheck Start SUPERAntispyware when Windows starts.
Click Close to exit.

Don't forget to re-enable it, when your computer is clean.

Disable Teatimer
First:

Right click Spybot in the System Tray (looks like a calendar with a padlock symbol)
Choose Exit Spybot S&D Resident

Second:

Open Spybot S&D
Click Mode, check Advanced Mode
Go To Left Panel, Click Tools, then also in left panel, click Resident
If your firewall raises a question, say OK
Uncheck the box labeled Resident Tea-Timer and OK any prompts.
Use File, Exit to terminate Spybot
Reboot your machine for the changes to take effect.

Don't forget to re-enable it, when your computer is clean.

Run FixIEDef:

Double-click FixIEDef

Click 'Accept'

Click 'Scan'

Wait for the scan to finish. It won't take very long.

WARNING: FixIEDef will kill all copies of Internet Explorer and Explorer that are running, during scanning. The icons and Start Menu on your Desktop will not be visible while FixIEDef is scanning. This is necessary to remove parts of the infection that would otherwise not be removed.

Everything will be restored to normal, once the malicious file is removed.

Click 'Exit' once FixIEDef displays the All Finished message.

Post the Results of the scan:

Attach the FixIEDef log, located on the Desktop.

Also attach a fresh HijackThis log.

"Only those who fail greatly can ever achieve greatly" - Robert F. Kennedy
Microsoft Most Valuable Professional - Consumer Security (2007-2008)
Member - Alliance of Security Analysis Professionals - Since 2006
Linux Registered User # 363218

ShadowPuterDude

Sat Aug 30 2008, 07:49AM

...the Shadow knows

Registered Member #1

Joined: Thu Apr 27 2006, 04:52PM
Location: Northern NY
Posts: 217
Thanked 10 times in 10 posts

Thread Closed

Reason: Lack of Response


Jump: Back to top