Trojan Horse Downloader & Fake Alert

[giget2000]

i checked off all the files you suggested and clicked on "fix checked" and then rebooted. I don't understand why but they are not deleted they are still there after it says they have deleted them?? Am I doing something wrong?

 

[mflynn]

My fault Giget.

I repaired the links to combofix (and in my template also this time) above it will download now. So get it and go get me the Log.

Mike

 

[giget2000]

I downloaded combofix but it said it dosen't work with my O.S. (Vista)?

 

[mflynn]

Again my fault I forgot you have Vista.

Turn of fUAC for now,

Go here http://www.petri.co.il/disable_uac_in_windows_vista.htm
Do method #4.

Reboot try to run if still have a problem rt click the Icon for mbam or sas and click Run as Administrator.

Go getum!

Mike

 

[mike171271]

As I understand it combofix run fine with Vista, I have found 1 post with someone having problems with it and vista, for a full rundown of using combofix look at Majorgeek or bleeping computer they know combofix inside out. First try in safe mode with full admin rights and get the latest version from on of the places above.. Good luck...

 

[giget2000]

now i confused because after running SAS it says I have A TROJAN.SYSTEM DRIVER from Combofix? I thought it was supposed to help not give me more problems?

 

[giget2000]

here is the latest hijack, i feel like i'm getting no where.

 

[mflynn]

If you turned off UAC . Then UAC may have been blocking full sas scans,

Post combofix log. We need the logs if you want us to be able to answer your questions and remove themalware properly.

So post the log then do mbam as UAC may have limited it also.

Mike

 

[giget2000]

when i run combo fix with UAC off it says "Error-Win32 only. Incompatable OS combofix only works for windows 2000 and windows XP"

 

[giget2000]

how do i remove combofix now? it has no unistall?

 

[mflynn]

Its a Vista thing. Is supposed to work but are reports like yours. So skip it for now.

Just get me

1. mbam and log

2, sas and log

2. HJT log!

I think we are finished but to see thes final logs and update me on any issues and how computer is running etc.

To get me the past logs in mbam click Logs and post them from the top down, in SAS Click Preferences Statistics/Logs get me top to bottom

Mike

 

[giget2000]

SAS is not done running but it still shows trojan.system driver in the Combofix folder? How do I uninstall combofix?

 

[giget2000]

mbam logs attatched

 

[mike171271]

don't worry about it open run box and type combofix /u should remove it..If not just delete the folder in c: called combofix