Books
#1
Senior Member
Profile: Join Date: Mar 2007
Location: south yorkshire, england
Posts: 73
Computer Experience:
recurring Trojan
A very good morning.PURen-gb.dll (Trojan.Agent) , then after a couple of days run the full scan again and its back! Any help with this would be very much Appreciated. Also this line is new in the hjt log: R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local ?HJT LOGSP3 (WinNT 5.01.2600)http://www.google.co.uk/ http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab http://update.microsoft.com/microsof...?1156165100000 http://update.microsoft.com/microsof...?1156165090984 http://sdlc-esd.sun.com/ESD44/JSCDL/...ws-i586-jc.cab Malwarebytes log:
#2
Staff
Lifetime Subscription
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 3,057
Computer Experience:
Hi seanhttp://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab HJT and scan only and check this line and click fix checked.HJT .
#3
Senior Member
Profile: Join Date: Mar 2007
Location: south yorkshire, england
Posts: 73
Computer Experience:
Hi Geri and thanks for your help.
#4
Senior Member
Profile: Join Date: Mar 2007
Location: south yorkshire, england
Posts: 73
Computer Experience:
Crikey Geri, don't know whats going on here
#5
Staff
Lifetime Subscription
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 3,057
Computer Experience:
Hi you put on your system?Deckard's System Scanner (dss .exe) Note: You must be logged onto an account with administrator privileges to complete the following. Close all other windows before proceeding. Double-click on dss .exe
When it has finished, dss main.txt and extra.txt -- please copy and then paste the contents of main.txt and extra.txt in your next reply.
#6
Senior Member
Profile: Join Date: Mar 2007
Location: south yorkshire, england
Posts: 73
Computer Experience:
Hi geri.
#7
Senior Member
Profile: Join Date: Mar 2007
Location: south yorkshire, england
Posts: 73
Computer Experience:
Hi Geri.SP3 (WinNT 5.01.2600)dss .exehttp://www.google.co.uk/ http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab http://update.microsoft.com/microsof...?1156165100000 http://update.microsoft.com/microsof...?1156165090984 http://sdlc-esd.sun.com/ESD44/JSCDL/...ws-i586-jc.cab
#8
Staff
Lifetime Subscription
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 3,057
Computer Experience:
Hi seanKaspersky WebScanner Click on “Accept” If your pop –up blocker blocks any windows from opening. Click Run on the window that opens .Windows Vista users you must open the web browser using the Run as Administrator command.The program will launch and then begin downloading the latest definition files:
Under Scan on the left side.Click on My Computer
This will start the program and scan your system.
Click the “Scan Report” On the left side.
The scan will take a while so be patient and let it run.
Once the scan is complete it will display if your system has been infected. Click the Save Report As button, and in the Browse dialog box, type a name for the scan report file that you want to create and select its type Text file . Click OK to save the file.:
Save the text file to your desktop.
Copy and paste that information in your next post.
#9
Senior Member
Profile: Join Date: Mar 2007
Location: south yorkshire, england
Posts: 73
Computer Experience:
Hi Geri.
#10
Staff
Lifetime Subscription
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 3,057
Computer Experience:
Hi seandss log looks OK and Kaspersky didn't find anything.
#11
Senior Member
Profile: Join Date: Mar 2007
Location: south yorkshire, england
Posts: 73
Computer Experience:
Thanks Geri, will do.
#12
Senior Member
Profile: Join Date: Mar 2007
Location: south yorkshire, england
Posts: 73
Computer Experience:
Good morning Geri.SP3 (WinNT 5.01.2600)http://www.google.co.uk/ http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab http://update.microsoft.com/microsof...?1156165100000 http://update.microsoft.com/microsof...?1156165090984 http://sdlc-esd.sun.com/ESD44/JSCDL/...ws-i586-jc.cab
#13
Staff
Lifetime Subscription
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 3,057
Computer Experience:
Hi seanhttp://www.fi.ru/warehouse/DRIVERS/P...p/hpf3420k.inf
#14
Senior Member
Profile: Join Date: Mar 2007
Location: south yorkshire, england
Posts: 73
Computer Experience:
THANKS Geri for all your help.
#15
Staff
Lifetime Subscription
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 3,057
Computer Experience:
Hi sean
Quote:
Should i report this to Malwarebytes?
You can if you want, AVG also if there is a way to do so within the GUI.
(Only kidding).
