also @ TechSpot: Xbox One: Entertainment Hub First, Gaming Console Second -- But Could It Disrupt TV?

System Check removal

Discussion in 'Virus and Malware Removal' started by Andrew1234, Jan 27, 2012.

Post New Reply
  1. Broni Malware Annihilator Posts: 39,349   +175

    That will speed up the scan.
  2. Andrew1234 TechSpot Enthusiast Posts: 113

    It found HEUR:Trojan.Script.Generic
  3. Broni Malware Annihilator Posts: 39,349   +175

    I can only comment when I see the log.
  4. Andrew1234 TechSpot Enthusiast Posts: 113

    Kaspersky is running extremely slow compared to the other scans. Estimated finish is in 21 days. Any suggestions?
  5. Broni Malware Annihilator Posts: 39,349   +175

    Download Dr.Web CureIt to the desktop:
    ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
    • Doubleclick the drweb-cureit.exe file and click Scan to run express scan. Click OK in pop-up window to allow scan.
    • This will scan the files currently running in memory and when something is found, click the Yes button when it asks you if you want to cure it. This is only a short scan.
    • Once the short scan has finished, select Complete scan.
    • Click the green arrow [IMG] at the right, and the scan will start.
    • Click Yes to all if it asks if you want to cure/move the file.
    • When the scan has finished, in the menu, click File and choose Save report list
    • Save the report to your desktop. The report will be called DrWeb.csv
    • Close Dr.Web Cureit.
    • Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.
    • Copy and paste that log in the next reply. You can use Notepad to open the DrWeb.cvs report.

    NOTE. During the scan, pop-up window will open asking for full version purchase. Simply close the window by clicking on X in upper right corner.
  6. Andrew1234 TechSpot Enthusiast Posts: 113

    Just want to make sure I'm doing this right... When I click "save report list", it doesn't give me the option to save it to desktop and no new file pops up on the desktop. It is in enhanced protection mode, so I don't know if that's the reason for not seeing it on the desktop or not.... Also it caught over 52,000 objects, do I need to move or delete anything now?
     
  7. Broni Malware Annihilator Posts: 39,349   +175

    Save it wherever it wants you to save it.
    Just remember the location.
  8. Andrew1234 TechSpot Enthusiast Posts: 113

    It doesn't show any location, I select "save report list" from the file tab and that is it.
  9. Broni Malware Annihilator Posts: 39,349   +175

    Please download SystemLook from one of the links below and save it to your Desktop.
    Download Mirror #1
    Download Mirror #2

    64-bit users go HERE
    • Double-click SystemLook.exe to run it.
    • Vista users:: Right click on SystemLook.exe, click Run As Administrator
    • Copy the content of the following box and paste it into the main textfield:
      Code:
      :filefind
      DrWeb.csv
      
    • Click the Look button to start the scan.
    • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
    Note: The log can also be found on your Desktop entitled SystemLook.txt
  10. Andrew1234 TechSpot Enthusiast Posts: 113

    Do you want me to close out dr.web and restart the computer first?
  11. Broni Malware Annihilator Posts: 39,349   +175

    No.................
  12. Andrew1234 TechSpot Enthusiast Posts: 113

    Ok but I cant click on anything. Says it's in enhanced protection mode
  13. Broni Malware Annihilator Posts: 39,349   +175

    Restart then.
  14. Andrew1234 TechSpot Enthusiast Posts: 113

    Dr.web recommends that I neutralize the objects found (52,000) before closing the program, do I need to do that now or what?
  15. Broni Malware Annihilator Posts: 39,349   +175

    Don't.
    I need to see what it wants to whack.
  16. Andrew1234 TechSpot Enthusiast Posts: 113

    K, I found the report log without downloading SystemLook or restarting the computer. Dr.web popped with a message showing the log location once I closed out the program. Should I restart now?
  17. Broni Malware Annihilator Posts: 39,349   +175

    Go ahead.
    That log seems to be rather big so...

    Upload the file(s) here: http://uploadmb.com/
    Copy the link inside the Direct Link box and post it in your next reply.
  18. Andrew1234 TechSpot Enthusiast Posts: 113

    Wasn't able to upload, this warning popped up...

    Warning: POST Content-Length of 897939708 bytes exceeds the limit of 113246208 bytes in Unknown on line 0
  19. Broni Malware Annihilator Posts: 39,349   +175

  20. Andrew1234 TechSpot Enthusiast Posts: 113

    Do I need to create an account for file dropper to work? I'm re-trying it right now but it doesn't show any signs of the upload working. I let it attempt to load for hours the first time but just says 0%.