Completed numerouos scans for multiple trojans

By marymmcc
Nov 24, 2008
  1. Multiple virus/trojans reappearing. I was about to reformat, when I noticed my recovery partition had been infected with infostealer. Attached are latest sdfix, and hijack this logs. The combofix log has been reported as too large 240kb. I have also used super antispyware, malwarebytes, and norton.Thanks in advance.
  2. Blind Dragon

    Blind Dragon TS Evangelist Posts: 3,908

    Incorrect HJT version installed or wrong folder
    • Please uninstall your current version of HJT (This can be done through Control Panel => add/remove programs icon => highlight HJT => select change/uninstall button)
    • The LATEST version of HJT (currently v2.0.0.2) can be downloaded from HERE
    • Run the HijackThis Installer and it will automatically place HJT in C:\Program Files\TrendMicro\HijackThis\HijackThis.exe. Please don't change the directory. If HijackThis is used from a temp folder it is in danger of being accidentally deleted by Disk Cleanup or similar tools.
    • After installing, the program launches automatically, select Scan now and save a log
    • After the scan is complete please post your log onto the forums in your next reply.


    Please run a fresh scan with the latest version

    You can zip or compress the combofix log to attach that
  3. marymmcc

    marymmcc TS Rookie Topic Starter

    Thank you Blind Dragon.
    I have uninstalled and reinstalled hijackthis. Log attached
  4. Blind Dragon

    Blind Dragon TS Evangelist Posts: 3,908

    That log is clean - can you compress the combofix log by right clicking it on the desktop - send to compressed folder then attach the zipped file here
  5. marymmcc

    marymmcc TS Rookie Topic Starter

    combofix file compressed as requested
  6. Blind Dragon

    Blind Dragon TS Evangelist Posts: 3,908

    It appears you zipped up the shortcut icon to combofix instead of the log?
  7. marymmcc

    marymmcc TS Rookie Topic Starter

    Sorry, Blind Dragon (must drive you crazy...)
    Hopefully, I have attached the correct zip

    Attached Files:

  8. jobeard

    jobeard TS Ambassador Posts: 9,148   +597

    Daddy taught me; Don't ask a question unless you are prepared to handle ALL replies.

    This is a public forum and the user community has varied interest, expertise and opinions on how to manage systems.
    The variety of response IS the good stuff of community interactions :)

    just my $0.02
  9. Blind Dragon

    Blind Dragon TS Evangelist Posts: 3,908

    Thanks for the $0.02 :haha:

    @mary ->

    [​IMG]Update your Java Runtime Environment

    Many types of malware like to exploit out of date Java versions!
    • GO HERE
    • Click on Verify Java

      If you need to update your version:
    • Select Free Java Download
    • When it finds the newer version - Follow the on screen instructions (uncheck the yahoo toolbar option)
    • After it installs the newest version Go back to Start -> Control Panel -> Add/remove programs (programs and features in vista)
    • Uninstall any older versions of Java except the most current update that you just installed


    [​IMG]Run Kaspersky Online AV Scanner

    In order to use it you have to use Internet Explorer.
    Go to Kaspersky and click the Accept button at the end of the page.

    Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the licence, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license accepted, reset to 100%.
    • Read the Requirements and limitations before you click Accept.
    • Allow the ActiveX download if necessary.
    • Once the database has downloaded, click Next.
    • Click on "My Computer"
    • When the scan has completed, click Save Report As...
    • Enter a name for the file in the Filename: text box and then click the down arrow to the right of Save as type: and select text file (*.txt)
    • Click Save - by default the file will be saved to your Desktop, but you can change this if you wish.
    Attach the report into your next reply
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...