BackDoor Blues

getteraye - Welcome to the Board

Let see what we can do for you .....

Please download the trial version of Ewido. When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu ". Once installed please update it by clicking on the Update button. Do not run it yet.

Please download HijackThis through Quicklinks in my signature and save it to a folder on your hard drive, say C:\HJT - not to the Desktop or a temporary location. When entries are fixed with HJT a backup is made to the folder from which HJT is run and this must be in a permanent location.

Boot into Safe Mode and log onto your usual account.

Run Ewido ....

Click on Scanner and select a 'Complete System Scan'.
If anything is found during scanning you will be prompted to clean the files.
Select "Remove" and check the boxes "Perform action with all infections" and "Create encrypted backup" and then click on OK

Once the scan has completed save the report to a known location.

Stay in Safe mode

Open the folder in which you placed HJT and double click on hijackthis.exe and select Scan and save a log file - this will be saved in the folder from which you ran HJT.

Reboot into Normal mode and post the Ewido and HJT logs here.

 

getteraye

Yes, please stick with the original thread - each time you reply all posters in the thread get an email notification to that effect - as you started a new thread I did not receive a notification of your reply.

- any ideas TeMerc?

 

No problem

Sorry about the confusion re. Ewido - I was not aware that they had updated the program this week and the install routine and interface has changed significantly. Here are the 'new' instructions - please uninstall the version of Ewido you have installed and start over ....

Please download and install the 30 day trial version of Ewido Anti-Spyware

Run the program either from the Desktop icon if you chose to install one or from Start > Programs. On the main screen select the Update icon followed by the "Update now" link and click on the Start Update button. The update will start and a progress bar will show the updates being installed.

When the update has completed select the Scanner icon at the top of the window and click on the Settings tab.

On the Settings screen click on Recommended actions and then on Quarantine.

Under Reports select Automatically generate report after every scan and deselect Only if threats were found.

Close Ewido Anti-spyware. Do not run a scan just yet.

Boot into Safe Mode and log onto your usual account.

Do not open any other windows or programs while Ewido is scanning as this may interfere with the scanning proccess.

Start Ewido Anti-spyware by double-clicking the icon on your desktop or from Start > Programs and select the Scanner icon at the top of the window followed by the Scan tab and click on Complete System Scan. The scanning process will start and may take some time.

When the scan is complete if any infections were detected you will prompted for an action - select Apply all actions.

Then select the Reports icon at the top of the window and click on the Save report as button in the lower left hand corner of the screen and save it as a text file (be sure to remember where you saved that file, this is important).

Close Ewido and reboot your system back into Normal Mode and post the Ewido scan report here.

AVG - I thought you were running Avast? If you are running both av's this is unwise - and no safer, as they are likely to conflict.