TechSpot

help, another whataboutadog problem

By bbaltoss
Oct 16, 2007
  1. hello, This is my first time. When I try to connect to the interenet, my PC just sits there. I checked my log files for Norton and there was connections for whataboutadog and doginhispen. I blocked those IP sites and when I did a search on whataboutadog, I found myself at this site. I realized that others were having the same problem. Log files are attached.
     
  2. Rik

    Rik Banned Posts: 3,814

    Double-click FindAWF.exe to start the tool. Then, do the following
    Select "option #2 - Restore files from bak folders" by typing 2 and press Enter .
    A text file will open up. Please copy/paste the following text from the quote box (all except the word QUOTE) into the text file.
    Close the .txt file and click Yes to save the changes.
    When the tool has completed, a report will open up in notepad. Please post the results of the awf.txt in your next reply as an attachment.





    This thread is for the use of bbaltoss only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  3. bbaltoss

    bbaltoss TS Rookie Topic Starter

    Option 2 ran successfully. Attached is my awf.txt from that run. Thanks so very much for you help.
     
  4. Rik

    Rik Banned Posts: 3,814

    Please double-click the FindAWF icon once again
    This time we are going to remove some folders.


    Use the following option: Press 3 then Enter to remove bak folders


    A text file opens called: folders.txt
    Click below the line and paste the following list of folders to be removed:

    Next, close and click Yes to save the changes.

    When done with the above, FindAWF automatically runs a new scan and opens a new log that you need to post.
    Please provide the new FindAWF log



    This thread is for the use of bbaltoss only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  5. bbaltoss

    bbaltoss TS Rookie Topic Starter

    Thanks again, Option 3 ran good. Here is the file.
     
  6. Rik

    Rik Banned Posts: 3,814

    Sorry, I must have missed one.
    Please double-click the FindAWF icon once again.

    Select "option #1 - Scan for bak folders" by typing 1 and press Enter
    When the tool has completed, a report will open up in notepad. Please post the results of the awf.txt as an attachment.



    This thread is for the use of bbaltoss only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  7. bbaltoss

    bbaltoss TS Rookie Topic Starter

    Rik,
    I reran the awf and the text file is attached. I'm ready for the next step.
    thanks
     
  8. Rik

    Rik Banned Posts: 3,814

    Your system was infected with a trojan called Downloader.Agent.awf. It replaces legitimate files that are common on most computers with an infected file. Then, it moves the legitimate files to a bak or backup folder.

    Running FindAWF allows us to identify the files that are infected, as well as the backups and then restore the files.


    To finish, run Option 4.

    Double-click the FindAWF icon once again.
    Use the following option: Press 4 then Enter to reset domain zones.


    When the program returns to the main menu, use the following option:
    Press E then Enter to EXIT.

    Once done.
    Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.

    Post fresh HJT, Combofix, and AVG Antispyware logs as ATTACHMENTS into this thread, only after doing the above.


    Also, let me know the results of the Panda Antirootkit scan.


    This thread is for the use of bbaltoss only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...