|
Answer» Sorry about that.
Try this one ftp://ftp.drweb.com/pub/drweb/cureit/cureit.exe Its back again, so it looks as if I can't send the Dr. Web log at all. Please advise.
Can you just post the log in the thread?
Don't forget to run the F-Secure also.Hope this is within the max. I'll be back later with F-Secure.
Thanks again. Bill
86412.exe;c:\documents and settings\owner\local settings\temp;Trojan.Packed.181;Deleted.; 65304.exe;C:\Documents and Settings\Owner\Local Settings\Temp;Trojan.Packed.181;Deleted.; d1b49.exe;C:\Documents and Settings\Owner\Local Settings\Temp;Trojan.Packed.181;Deleted.; A0001341.dll;C:\System Volume Information\_restore{633899DE-AE4D-4DF3-AA36-7E143BF52292}\RP26;Adware.NavHelper;Incurable.Deleted.; A0001342.exe;C:\System Volume Information\_restore{633899DE-AE4D-4DF3-AA36-7E143BF52292}\RP26;Adware.NavHelper;Incurable.Deleted.; A0002913.exe;C:\System Volume Information\_restore{633899DE-AE4D-4DF3-AA36-7E143BF52292}\RP32;Trojan.Packed.181;Deleted.; A0004973.dll;C:\System Volume Information\_restore{633899DE-AE4D-4DF3-AA36-7E143BF52292}\RP39;Adware.Msearch;Incurable.Deleted.; DateManager.exe;D:\Program Files\Date Manager;Adware.Gator;Invalid path to file ; f3Setup1.exe;D:\Program Files\FunWebProducts\Installr;Adware.Funweb;Invalid path to file ; F3EZSETP.DLL;D:\Program Files\FunWebProducts\Installr\1.bin;Adware.Funweb;Invalid path to file ; MWSSRCAS.DLL;D:\Program Files\MyWebSearch\SrchAstt\1.bin;Adware.Websa;Invalid path to file ; F3POPSWT.DLL;D:\Program Files\MyWebSearch\bar\1.bin;Adware.Funweb;Invalid path to file ; M3OUTLCN.DLL;D:\Program Files\MyWebSearch\bar\1.bin;Adware.MWS;Invalid path to file ; MWSBAR.DLL;D:\Program Files\MyWebSearch\bar\1.bin;Adware.MWS;Invalid path to file ; MWSOEMON.EXE;D:\Program Files\MyWebSearch\bar\1.bin;Adware.Websearch;Invalid path to file ; NHUninstaller.exe;D:\Program Files\NavExcel\NavHelper\v2.0.4;Adware.NavHelper;Invalid path to file ; NHUpdater.exe;D:\Program Files\NavExcel\NavHelper\v2.0.4;Adware.NavHelper;Invalid path to file ; NHelper.dll;D:\Program Files\NavExcel\NavHelper\v2.0.4;Adware.NavHelper;Invalid path to file ; newdotnet5_40.dll\data002;D:\Program Files\NewDotNet\newdotnet5_40.dll;Adware.NewDotNet;; newdotnet5_40.dll;D:\Program Files\NewDotNet;Archive contains infected objects;Invalid path to file ; YO Evil:
F-Secure finished downloading and scanning [showing 10 bad ones] but at the final page I read Show Report, which does nothing when I click it. There is a "Finish" link but I am AFRAID to click it for fear the whole thing ends and I would have to start the entire 3 hour F-Secure process again. Do I dare click "Finish" when I have no respone from Show Report? Please advise. If you can't get the report to show then that is that.
Go ahead and post a new Hijackthis log.
Let us know how the computer is now.OK Evil. Here comes the Hijack This log. So far no virus action, so I THINK maybe with your considerable help, we appear to have knocked off the Trojan Horse. Praise the Lord! Please let me know what the attached log seems to reveal. By the way, Hijack reported 10 objects caught on its log before it was lost and I am very sure one was the Trojan.
Thanks very much. Indeed, bunches!
Bill S.
[file cleanup - saving space - attachment deleted by admin]The log looks fine.
To learn more about how to protect yourself while on the internet read this ARTICLE by Tony Klien: So how did I get infected in the first place?
If anything else comes up then let us know.
Thank you so much! Your help was indeed appreciated.
Bill S.
|