TechSpot

Thank God I found this site. Please Help!

By xaxpaco
Nov 1, 2006
  1. Hello everybody! I'm new to this site and would like to ask help on the pop-up error appearing on my toolbar. It says

    "System Alert: Trojan-Spy.Win32@mx"

    I found a thread that has instructions on how to deal with this but I decided to post my own.

    Please Help :(

    PCA
     
  2. Rik

    Rik Banned Posts: 3,814

  3. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    Go and read the Trojan Pakes and other nasties preliminary removal instructions. Follow all the instructions exactly.

    Post fresh HJT and AVG Antispyware logs as attachments into this thread, only after doing the above.


    Regards Howard :wave: :wave:


    This thread is for the use of xaxpaco only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  4. xaxpaco

    xaxpaco TS Rookie Topic Starter

    Windows Safe Mode Error

    Thank you so much for the help Rik and Howard!

    However while I was carefully following Howards instructions, being at the "4 Tools" step already, I was supposed to reboot my system to run in Safe Mode; But everytime I select the safe mode option it won't go through. A series of command propmts just comes up then it stops there. Is there something wrong with my OS?

    Thank you for your time.
     
  5. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Don`t worry about not being able to get into safe mode at the moment. Follow the instructions without safe mode.

    Regards Howard :)

    This thread is for the use of xaxpaco only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  6. xaxpaco

    xaxpaco TS Rookie Topic Starter

    Thank You Howard! Im currently scanning using SS&D, towards the end of the proccesses. almost done. after doing the rest of the steps, how do i complete the HJT? Thank you very much!
     
  7. N3051M

    N3051M TS Evangelist Posts: 2,115

    -If not already done so, download the hijackthis.zip from the link.
    -Unzip it and specify the location to c:\Program Files\HiJackThis1991 (or just unzip it and move it there if its easier)
    -Open that location using Explorer, find the HiJackThis.exe file and rename it to something like HiJackThis1991.exe or something different.
    -Run the program, and click on "Do a System Scan and save a Log file"
    -Let it run and it will pop up a notepad file. Close it and go back to the HiJackThis folder then locate the newly created log file.
    -Upload the .log file here as an attachment here.
     
  8. xaxpaco

    xaxpaco TS Rookie Topic Starter

    Hjt Log

    Thank you guys for all your help. I have attached my HJT log but I'm not really sure if it went through. I'kk try to check back in a few minutes. Thanks again!
     
  9. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    It looks like you forgot to attach your HJT log. I also need an AVG Antispyware log.

    Regards Howard :)

    This thread is for the use of xaxpaco only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  10. xaxpaco

    xaxpaco TS Rookie Topic Starter

    Attachment

    Im sorry about that, I'm so having trouble attaching the file, everytime I click the attach icon, nothing comes up. Would it be ok if I copy and paste each log? Thanks :)
     
  11. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Since you`re having problems attaching your logs, please feel free to copy and paste them. I will remove them once I`ve finished with them.

    Regards Howard :)

    This thread is for the use of xaxpaco only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  12. xaxpaco

    xaxpaco TS Rookie Topic Starter

    Ive Copy pasted the Logs already! :) Thanks for your help, I appreciate it. Please let me know if I've done or not done something. :)

    Thank You!
     
  13. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Run HJT with no other programmes open. Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    O16 - DPF: {CDE3CA69-293C-4B4C-AB3B-BAAED5197238} (KPDownload1Obj Class) - http://aaol.abacus.com.sg/v1/KPOrion.cab

    O16 - DPF: {DB3DAEA1-61A8-4D32-A957-095DB3C3363D} (BF_DLL Class) - http://aaol.abacus.com.sg/v1/KPMain.1.cab

    O17 - HKLM\System\CCS\Services\Tcpip\..\{214927AB-7D39-42CD-A46B-0B015100624C}: NameServer = 202.81.160.6 202.81.160.7<Only fix this if it doesn`t belong to your ISP.

    Click on the fix checked button.

    Close HJT and reboot your system.

    Other than the above, your HJT log is clean.

    Regards Howard :)

    This thread is for the use of xaxpaco only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  14. xaxpaco

    xaxpaco TS Rookie Topic Starter

    Thanks!

    I already removed the file you specified. Yes, the 017 file might be with my ISP because it didn't appear on the latest scan I did, this time without the internet connection. Thank you again!

    I hope I'll be able to contribute something in this site too, in the future! :)

    PCA
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...