Trojans/helper.dll/helper.sig

[PsychoDave]

Here is the MBAM log

 

[xxdanielxx]

HKEY_CLASSES_ROOT\main.bho.1 (Trojan.BHO) -> No action taken.

 

[PsychoDave]

Ok, so what do I do with that and these?

Files Infected:
C:\Program Files\Common\helper.dll (Adware.BHO) -> No action taken.
C:\System Volume Information\_restore{E4FBD1B3-1970-40BB-936B-F702FFF64F9F}\RP1646\A0757445.vxd (Adware.Winad) -> No action taken.
C:\System Volume Information\_restore{E4FBD1B3-1970-40BB-936B-F702FFF64F9F}\RP1648\A0758353.dll (Adware.BHO) -> No action taken.
C:\System Volume Information\_restore{E4FBD1B3-1970-40BB-936B-F702FFF64F9F}\RP1648\A0759353.dll (Adware.BHO) -> No action taken.
C:\System Volume Information\_restore{E4FBD1B3-1970-40BB-936B-F702FFF64F9F}\RP1648\A0760353.dll (Adware.BHO) -> No action taken.

 

[PsychoDave]

I just rebooted and helper.dll is gone but helper.sig and _helper.sig still remain

 

[Metallica]

Do a Google search for {AFD4AD01-58C1-47DB-A404-FBE00A6C5486}
and follow the link to my blog (it should be one of the first links; probably the second one), where you will find a method to get rid of this pain.

I am not allowed to post links yet, so I have to apologize for the indirect approach.

 

[PsychoDave]

xxdanielxx, any word? Should I trust Metallica and go to his blog? I havent yet...just seems fishy to me

 

[Metallica]

Ask Daniel who is teacher is at GeekU.

I can't post any direct links because on this board you have to have 5 posts first.
But I have been fighting malware since 2002 and have been awarded by Microsoft with a MVP award.

 

[sharkie21]

I just rebooted and helper.dll is gone but helper.sig and _helper.sig still remain

Dave, once helper.dll was gone. I just deleted helper.sig and the folder and it never came back. However, I'm not sure if the virus is gone still. I'm trying to get someone to verify my HJT log.

 

[xxdanielxx]

xxdanielxx, any word? Should I trust Metallica and go to his blog? I havent yet...just seems fishy to me

Yes

 

[PsychoDave]

Cool, Ill head over there and check it out...


Ok, got the program and script and ran it...here is the log

 

[PsychoDave]

Its gone!! Finally! Thank you xxdanielxx and Metallica! I really appreciate it! Sharkie, go to Metallicas blog to remove helper.dll and .sig. If you have any other bugs get the programs xxdanielxx told me to do and run them.

Again, thank you both!!!

 

[Metallica]

You're welcome.

 

[xxdanielxx]

anytime I will be back after I am done with training.

 

[Kindwoman]

Me too

Hi, I have been struggling with the same problem! Is there someone who could give me some advice as what to do please? My computer's performance is getting worse and worse.


I just ran hijackthis and am attaching the log file. Please could someone take a look at it!

 

[rf6647]

Please open a new thread for your computer problem. Be specific about the symptoms you're seeing

• For anyone seeking help with malware removal, the volunteers expect 3 logs: MBAM, SAS, & HJT.
  
  
• Following the Guide: UPDATED 8-step Viruses/Spyware/Malware Preliminary Removal Instructions creates a common beginning for an initial assessment.
  
  
• Just a few key symptoms can better focus the efforts.
  

 

[Kindwoman]

Okay rf, thanks for the link! I will go there now...