Doginhispen infection

[th1776]

Here is the latests kaspersky.txt file. 1 virus, 7 infected objects.

 

[kritius]

Thats ok though because all of the infections are in the system restore point.

The next few steps should clear all that up for you.

Delete the three tools that were used in step 10 of the 15 steps, VundoFix, Virtmundobegone and SmitfraudFix, by dragging them to the recycle bin and then emptying it.

Next we remove all used tools.

Please download OTMoveIt2 and save it to desktop.

• Double-click OTMoveIt2.exe.
• Click the CleanUp! button.
• Select Yes when the "Begin cleanup Process?" prompt appears.
• If you are prompted to Reboot during the cleanup, select Yes.
• The tool will delete itself once it finishes, if not delete it by yourself.

Note: If you receive a warning from your firewall or other security programs regarding OTMoveIt2 attempting to contact the internet, please allow it to do so.

• Disable and Enable System Restore. - If you are using Windows XP or Vista then you should disable and re-enable system restore to make sure there are no infected files found in a restore point.
  
  You can find instructions on how to enable and re-enable system restore here:
  
  Windows XP System Restore Guide
  
  After doing this run another Kaspersky scan and post it here for me to see.

 

[th1776]

Here is the latest Kaspersky.txt file.

The scan did not find anything this time. Thanks for your patience with me.

I still have the following anti-spyware and detection tools on my system:
- SpyBot - Search & Destroy
- AVG Anti-Spyware 7.5
- Windows Defender
- Spy Sweeper
- Ad-Adware 2007
- CC Cleaner
- Hijack This
- eTrust Anti-Virus

eTrust, Spy Sweeper, AVG and Windows Defender are all running at the same time. Is all of this really necessary?

 

[kritius]

Is eTrust free?

Keep Windows Defender, SpyBot, Ccleaner, and Ad Aware.

You can get rid of AVG antispyware if you want to but I find it quite useful to do a scan once a week or so with it.

HijackThis can be removed unless you want to keep it, but i wouldnt advise removing anything with it unless you check with someone first.

 

[th1776]

eTrust isn't free, but I am using a site license.

Spy Sweeper is also paid for by someone else.

OK, I will keep the other freebies.

I would never ever use HJT to remove anything without proper assistance.

Where does doginhispen usually come from? I do not visit suspicious sites, especially on a work computer. Could this have come from an e-mail? The only e-mail I have used on this machine in the last 4 months is Hotmail, and they are pretty rigorous about scanning for this kind of stuff.

 

[kritius]

its a trojan called Downloader.Agent.awf.

im not sure where it comes from. Its been becoming very common, I think ive seen it in about 10 or so posts here recently.

Theres not much info on it when you google it, I just know how to get rid of it.

Has the computer been acting ok recently then?

 

[th1776]

Thanks for your help. I am glad you know how to remove it. I remember when I first came to the TechSpot site and searched on it, I got quite a few hits, and it was obvious each person's situation was a little bit different.

When I Googled it, about all I got was ads for software that purported to remove it. I hate that.

Anyway, the computer is acting fine, now, and with all of that anti-spyware running, I hope this never happens again.

Thanks again.

 

[kritius]

No problem.

If you do have any more problems then you know eher we are.

Happy and safe surfing.