#1
Inactive
Profile: Join Date: Jun 2008
Location: Auckland, NZ
Posts: 6
Computer Experience:
Attention, (user)! Some dangerour trojan horses detected in your system.
Please help, my partner downloaded a file yesterday, our 90-day anti-virus trial had only just expired and now everythings basically turned to custard. I would say the internet is barely accessible now; I keep getting the pop-up below:Attention XXXX, Some dangerous trojan horses detected in your system. Microsoft Windows XP files corrupted. This may lead to the destruction of important files in C:\WINDOWS. Download protection software now! Click OK to download the antispyware. (Recommended)
Didn't find the information you thought to find?Similar Threads
#2
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
Welcome to WindowsBBS Valz here or here and save the file to your desktop.mbam-setup.exe to install the application.Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware , then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded, select 'Perform Quick Scan ', then click Scan .
The scan may take some time to finish,so please be patient.
When the scan is complete, click OK, then Show Results to view the results.
Make sure that everything is checked , and click Remove Selected .
When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note below)
The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Post the entire report in your next reply.
this topic , install the latest version of Hijackthis, run a scan and save the log (you can close it for now). Then, download and run Deckard's System Scanner and post BOTH the main.txt and extra.txt logs. You may be required to put them in separate posts due to character count limitations.
#3
Inactive
Profile: Join Date: Jun 2008
Location: Auckland, NZ
Posts: 6
Computer Experience:
Trojan
heres the results
#4
Inactive
Profile: Join Date: Jun 2008
Location: Auckland, NZ
Posts: 6
Computer Experience:
HJT Log
Logfile of Trend Micro HijackThis v2.0.2SP1 (WinNT 6.00.1905)http://google.co.nz/ http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157
#5
Inactive
Profile: Join Date: Jun 2008
Location: Auckland, NZ
Posts: 6
Computer Experience:
Deckard's System Scanner v20071014.68SP1 (WinNT 6.00.1905)dss .exehttp://google.co.nz/ http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 .reg - regfile - shell\open\command - regedit.exe "%1" %* .scr - scrfile - shell\open\command - "%1" %* atapi (IDE Channel) - c:\windows\system32\drivers\atapi .sys (file missing)ISA /EISA Class Driver) - c:\windows\system32\drivers\msisadrv.sys (file missing)pci (PCI Bus Driver) - c:\windows\system32\drivers\pci .sys (file missing)RDP Encoder Mirror Driver) - c:\windows\system32\drivers\rdpencdd.sys (file missing)TCP /IP and TCP /IPv6 Protocol (SMB session)) - c:\windows\system32\drivers\smb.sys (file missing)TCP /IP Protocol Driver) - c:\windows\system32\drivers\tcpip.sys (file missing)TCP /IP Registry Compatibility) - c:\windows\system32\drivers\tcpipreg.sys (file missing)HTTP - c:\windows\system32\drivers\http .sys (file missing)HD Audio (WDM)) - c:\windows\system32\drivers\rtkvhd64.sys (file missing)IP Traffic Filter Driver) - c:\windows\system32\drivers\ipfltdrv.sys (file missing)BIOS Driver) - c:\windows\system32\drivers\mssmbios.sys (file missing)WAN Driver) - c:\windows\system32\drivers\ndiswan.sys (file missing)WAN Miniport (PPTP)) - c:\windows\system32\drivers\raspptp.sys (file missing)WAN Miniport (L2TP)) - c:\windows\system32\drivers\rasl2tp.sys (file missing)WAN Miniport (SSTP)) - c:\windows\system32\drivers\rassstp.sys (file missing)IP Network Address Translator) - c:\windows\system32\drivers\ipnat.sys (file missing)RDP Winstation Driver) - c:\windows\system32\drivers\rdpwd.sys (file missing)IP ARP Driver) - c:\windows\system32\drivers\wanarp.sys (file missing)AMD K8 Processor Driver) - c:\windows\system32\drivers\amdk8.sys (file missing)ISA /EISA Bus Driver) - c:\windows\system32\drivers\isapnp.sys (file missing)
#6
Inactive
Profile: Join Date: Jun 2008
Location: Auckland, NZ
Posts: 6
Computer Experience:
Logfile of Trend Micro HijackThis v2.0.2SP1 (WinNT 6.00.1905)dss .exehttp://google.co.nz/ http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157
Last edited by Valz; 23rd June 2008 at 12:33 .
Reason: mixed up Posting
#7
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
I just noticed you are using a 64bit operating system. Unfortunately, most of our tools are not compatable with the 64bit systems and we are unable to get accurate info. It appears MBAM got the nasties, so lets run an online scan to see if anything else turns up. Please do an online scan with Kaspersky Online Scanner Accept , when prompted to download and install the program files and database of malware definitions.Click Run at the Security prompt.
The program will then begin downloading and installing and will also update the database.
Please be patient as this can take several minutes.
Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
Click View scan report at the bottom.
Click the Save Report As... button.
Click the Save as Text button to save the file to your desktop so that you may post it in your next reply.
**Note** Close any open programs.
Turn off the real-time scanner of all antivirus or antispyware programs while performing the online scan.
Note for Internet Explorer 7 users: If at any time you have trouble viewing the accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75%. Once the license is accepted, reset to 100%.
#8
Inactive
Profile: Join Date: Jun 2008
Location: Auckland, NZ
Posts: 6
Computer Experience:
Hi
We ran the scan but it didnt have any reports at the end.. also is 64bit good or bad?
#9
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,524
Computer Experience:
In general, 64 bit is good, and much more resistant to malware than 32 bit. If the online scan didn't reveal any infections, well, that's great!
All times are GMT +1. The time now is 09:46 .
