January 3rd, 2009, 04:50 PM
#1
Hi there, i have tried many different ways of getting rid of this Trojan but am having no luck.... Here is my hijackthis log, if anyone can help that would be great http://format.packardbell.com/cgi-bi...e=6&key=SEARCH http://www.oneway-uk.com/myauctions.php http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://www.ca.com/gb/securityadvisor...fo/webscan.cab http://www.crucial.com/controls/cpcScanner.cab
January 3rd, 2009, 08:13 PM
#2
Download Malwarebytes' Anti-Malware (http://www.majorgeeks.com/Malwarebyt...are_d5756.html ) to your desktop.mbam-setup.exe and follow the prompts to install the program.Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware , then click Finish. Perform full scan , then click Scan. Show Results to view the results.Remove Selected .Post the log back here .log-date.txt log-date.txt Post new HJT log.
January 4th, 2009, 03:02 PM
#3
Hi there, Thanks for your help, here is the info you asked for :http://format.packardbell.com/cgi-bi...e=6&key=SEARCH http://www.oneway-uk.com/myauctions.php http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://www.ca.com/gb/securityadvisor...fo/webscan.cab http://www.crucial.com/controls/cpcScanner.cab
January 4th, 2009, 03:58 PM
#4
Ok. You never updated MBAM. Please do so and run MBAM again following my previous instructions.
January 4th, 2009, 05:52 PM
#5
It would not let me update in normal mode so i had to do it in safe mode with networking. Here it all is:http://format.packardbell.com/cgi-bi...e=6&key=SEARCH http://www.oneway-uk.com/myauctions.php http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://security.symantec.com/sscv6/S.../bin/cabsa.cab http://www.ca.com/gb/securityadvisor...fo/webscan.cab http://www.crucial.com/controls/cpcScanner.cab
January 4th, 2009, 10:41 PM
#6
Run hijackthis and place a check next to the following entries;O2 - BHO: (no name) - {134FBD53-1105-4C4D-B7BB-2F7FBBA174E8} - (no file)
January 5th, 2009, 06:39 AM
#7
Hi again, thanks so much for all your help with this, i could not locate those last 2 files. My norton stopped working when this all happened and still will not open, the pc seems to be a bit faster but still does not seem as quick as before. Here is my log file, any more help would be great:http://format.packardbell.com/cgi-bi...e=6&key=SEARCH http://www.oneway-uk.com/myauctions.php http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://security.symantec.com/sscv6/S.../bin/cabsa.cab http://www.ca.com/gb/securityadvisor...fo/webscan.cab http://www.crucial.com/controls/cpcScanner.cab
January 5th, 2009, 07:09 AM
#8
Norton will probably have to be re-installed. Better yet, uninstall it and use a free AV such as Avast! which in my opinion is a lot better.download ComboFix by sUBs from HERE HERE You must download it to and run it from your Desktop Physically disconnect from the internet. Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix. Double click combofix.exe & follow the prompts. When finished, it will produce a log. Please save that log to post in your next reply along with a fresh HJT log Re-enable all the programs that were disabled during the running of ComboFix.. Note: Do not mouse-click combofix's window while it is running. That may cause it to stall. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely , the connection can be manually restored by restarting your machine. Run Combofix ONCE only!!
January 5th, 2009, 07:29 AM
#9
Hi again, how do i stop all my monitoring programs?
January 5th, 2009, 07:57 AM
#10
Depends on what you have. Usually you can stop them from the system tray at the bottom right of your monitor.
January 5th, 2009, 08:54 AM
#11
Most of the things i have running aren't on the tray. where do i go to stop them in this case?
January 5th, 2009, 01:39 PM
#12
ok i managed to do that, here are the log files ComboFix is attached as log file was too long: http://www.oneway-uk.com/myauctions.php http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://security.symantec.com/sscv6/S.../bin/cabsa.cab http://www.ca.com/gb/securityadvisor...fo/webscan.cab http://www.crucial.com/controls/cpcScanner.cab
January 5th, 2009, 03:45 PM
#13
Please go to Jotti's virustotal
January 5th, 2009, 05:11 PM
#14
Service
January 5th, 2009, 09:04 PM
#15
Go to folder options in the control panel and under the VIEW Tab, make sure that show hidden files and folders is checked.
Thread Information
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
Forum Rules
[RESOLVED] Trojan.vundo.h HELP!!!
Reply With Quote
