|
#21
|
|||
|
|||
|
nevermind, saw the answer to my question in one of the pictures.
|
|
#22
|
||||
|
||||
|
Make sure to disable any AV or Spyware protection before running this tool
|
|
|
|
#23
|
|||
|
|||
|
Ok, here are the combofix and HJT logs
|
|
#24
|
||||
|
||||
|
Please download Malwarebytes' Anti-Malware from Here or Here
Double Click mbam-setup.exe to install the application.
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly. |
|
#25
|
|||
|
|||
|
Trojan/helper.dll/helper.sig
I have the same problem as Dave. Can you check to see if my HJT log is clean. The windows doesn't pop up anymore after I ran malwarebytes twice, and then deleted helper.sig and the folder. However, my computer restarts randomly.
Thanks. Last edited by sharkie21; 08-24-2008 at 11:57 AM.. Reason: Added logs |
|
#26
|
|||
|
|||
|
Here is the MBAM log
|
|
#27
|
||||
|
||||
|
HKEY_CLASSES_ROOT\main.bho.1 (Trojan.BHO) -> No action taken.
|
|
#28
|
|||
|
|||
|
Ok, so what do I do with that and these?
Files Infected: C:\Program Files\Common\helper.dll (Adware.BHO) -> No action taken. C:\System Volume Information\_restore{E4FBD1B3-1970-40BB-936B-F702FFF64F9F}\RP1646\A0757445.vxd (Adware.Winad) -> No action taken. C:\System Volume Information\_restore{E4FBD1B3-1970-40BB-936B-F702FFF64F9F}\RP1648\A0758353.dll (Adware.BHO) -> No action taken. C:\System Volume Information\_restore{E4FBD1B3-1970-40BB-936B-F702FFF64F9F}\RP1648\A0759353.dll (Adware.BHO) -> No action taken. C:\System Volume Information\_restore{E4FBD1B3-1970-40BB-936B-F702FFF64F9F}\RP1648\A0760353.dll (Adware.BHO) -> No action taken. |
|
#29
|
|||
|
|||
|
I just rebooted and helper.dll is gone but helper.sig and _helper.sig still remain
|
|
|
|
#30
|
|||
|
|||
|
Do a Google search for {AFD4AD01-58C1-47DB-A404-FBE00A6C5486}
and follow the link to my blog (it should be one of the first links; probably the second one), where you will find a method to get rid of this pain. I am not allowed to post links yet, so I have to apologize for the indirect approach. |
|
#31
|
|||
|
|||
|
xxdanielxx, any word? Should I trust Metallica and go to his blog? I havent yet...just seems fishy to me
|
|
#32
|
|||
|
|||
|
Ask Daniel who is teacher is at GeekU.
![]() I can't post any direct links because on this board you have to have 5 posts first. But I have been fighting malware since 2002 and have been awarded by Microsoft with a MVP award. |
|
#33
|
|||
|
|||
|
Dave, once helper.dll was gone. I just deleted helper.sig and the folder and it never came back. However, I'm not sure if the virus is gone still. I'm trying to get someone to verify my HJT log.
|
|
#34
|
||||
|
||||
|
Yes
|
|
#35
|
|||
|
|||
|
Cool, Ill head over there and check it out...
Ok, got the program and script and ran it...here is the log Last edited by PsychoDave; 08-27-2008 at 02:01 AM.. |
|
#36
|
|||
|
|||
|
Its gone!! Finally! Thank you xxdanielxx and Metallica! I really appreciate it! Sharkie, go to Metallicas blog to remove helper.dll and .sig. If you have any other bugs get the programs xxdanielxx told me to do and run them.
Again, thank you both!!! |
|
#37
|
|||
|
|||
|
You're welcome.
![]() |
|
#38
|
||||
|
||||
|
anytime I will be back after I am done with training.
|
|
#39
|
||||
|
||||
|
Me too
Hi, I have been struggling with the same problem! Is there someone who could give me some advice as what to do please? My computer's performance is getting worse and worse.
![]() I just ran hijackthis and am attaching the log file. Please could someone take a look at it! Last edited by Kindwoman; 12-12-2008 at 10:11 AM.. |
|
#40
|
|||
|
|||
|
Please open a new thread for your computer problem. Be specific about the symptoms you're seeing
Quote:
|
![]() |
| Thread Tools | |
|
|
| Similar Topics | ||||
| Topic | Category | Replies | Last Post | |
| Please help me. I have 2 trojans :( | Virus & Malware removal | 6 | 05-15-2007 05:00 PM | |
| Trojans! | Virus & Malware removal | 3 | 04-03-2007 03:22 PM | |
| IM trojans on net ... | Virus & Malware removal | 8 | 02-13-2007 09:42 PM | |
| Trojans R Us atm lol | Virus & Malware removal | 9 | 10-23-2006 06:32 PM | |
| A BHO ( Browser helper object) | Virus & Malware removal | 2 | 10-23-2006 07:48 AM | |
All times are GMT -4. The time now is 07:31 PM.






