InterviewSolution
Saved Bookmarks
InterviewSolution
| 1. |
Solve : Please Help.. Please Help.... Logs Included...Please Help? |
|
Answer» I'd like to scan your machine with ESET OnlineScan •Hold down Control and click on the following link to open ESET OnlineScan in a new window. ESET OnlineScan •Click the button. •For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
•Click the button. •Accept any security warnings from your browser. •Check •Push the Start button. •ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time. •When the scan completes, push •Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your NEXT reply. •Push the button. •Push A log file will be saved here: C:\Program Files\ESET\ESET Online Scanner\log.txt Here is the ESET scan log. Computer is now running good with zero redirects. The whitesmoke translator resurfaced and still MAY be LINGERING about. Here is the log. Thank you Dave. C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\40\5c741ce8-2e6be660 multiple threats deleted - quarantined C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\49\1aaeb971-35a8228b Java/Agent.U trojan deleted - quarantined C:\Windows\System32\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\268abc7b-746d5370 Java/Agent.V trojan deleted - quarantined C:\Windows\Temp\bjxy\setup.exe a VARIANT of Win32/TrojanDownloader.FraudLoad.NAE trojan cleaned by deleting - quarantined Please update and run MBAM again and post the log.I updated MBAM and ran a scan, here is the log. Malwarebytes' Anti-Malware 1.50.1.1100 www.malwarebytes.org Database version: 5572 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18999 1/22/2011 3:10:45 PM mbam-log-2011-01-22 (15-10-45).txt Scan type: Quick scan Objects scanned: 150792 Time elapsed: 2 minute(s), 11 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 2 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: c:\Windows\Temp\4143.tmp (PUP.BHO) -> Quarantined and deleted successfully. c:\Windows\System32\config\systemprofile\local settings\temporary internet files\Content.IE5\J8FR3DV1\whitesmoketoolbar[1].exe (PUP.WhiteSmoke) -> Quarantined and deleted successfully. Good. Now please run the ESET scan again. |
|