Показано с 1 по 4 из 4.

trojan

  1. #1
    Junior Member Репутация
    Регистрация
    20.10.2009
    Сообщений
    2
    Вес репутации
    31

    trojan

    hello,
    1.kaspersky sees at least 3 troyans but it is unabble to remove them.

    2.Thirteen windows appear systematically when computer starts

    3.Streaming videos are very slow

    4.CPU is running at 100 percent when playing a short video

    5.I tried differents things with the help of different forums for the second,the third and forth points wich led me to the probability of having virus in my system.

    Sorry for my english,

    Cordially,
    thomas.
    Вложения Вложения

  2. #2
    Senior Member Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Аватар для drongo
    Регистрация
    17.09.2004
    Адрес
    Israel
    Сообщений
    7,165
    Вес репутации
    972
    Welcome!
    1. What are the names of viruses and where kaspersky detect your viruses (i mean,the exact location) ?
    Have you tried to launch avptool in safe mode ( push F8 after restart) and clean the computer with it in automatic mode? Do it now. If you did it already, try CureIt in safe mode.
    2.What is the disk I in your system? If it some removable disk on key, and you have it.--> Please press on Shift and hold it, then connect this device to your computer.
    3. Disable avast and disconnect from internet, execute this script
    in avptool:
    Код:
    begin
    SearchRootkit(true, true);
    SetAVZGuardStatus(True);
     QuarantineFile('C:\Program Files\Web Technologies\iebtm.exe','');
     QuarantineFile('C:\WINDOWS\system32\ezSP_Px.exe','');
     QuarantineFile('I:\autorun.inf','');
     DelBHO('{00000001-C003-4A2F-9142-7CB1D78DE6C1}');
     DelBHO('{5C255C8A-E604-49b4-9D64-90988571CECB}');
     DelBHO('{8D9C7B8D-0C90-B55C-50B3-468F286DDC2A}');
     DelBHO('{D46BEAA4-A304-40B3-A9DA-EC7F7F501F25}');
     DelBHO('{65742936-8079-408B-9F3C-874B78030A72}');
    BC_ImportAll;
    BC_Activate;
    SetAVZPMStatus(True);
    ExecuteRepair(6);
    ExecuteRepair(8);
    ExecuteRepair(9);
    RebootWindows(true);
    end.
    4.After reboot execute following script in Manual Cure
    Код:
    begin
    CreateQurantineArchive('C:\quarantine.zip');
    end.
    5.Upload the C:\quarantine.zip over the link Upload quarantined files on the top of this page.
    Let us know, when you will done.

    P.s. Do you intend in near future to update your Windows? Otherwise, it is a good chance to catch malware on every connection to the Internet.
    Последний раз редактировалось drongo; 20.10.2009 в 19:52.

  3. #3
    Junior Member Репутация
    Регистрация
    20.10.2009
    Сообщений
    2
    Вес репутации
    31

    here is the list

    not found: Trojan program Backdoor.Win32.UltimateDefender.kf File: C:\Documents and Settings\gl\Local Settings\Application Data\kjacaaaa.exe//PE_Patch.UPX//UPX

    not found: Trojan program Backdoor.Win32.UltimateDefender.kf File: C:\Documents and Settings\gl\Local Settings\Application Data\nonaaaaa.exe//PE_Patch.UPX//UPX


    not found: Trojan program Trojan-Downloader.HTML.IFrame.abw File: C:\Documents and Settings\gl\Local Settings\Application Data\P2P_Energy\rss\http___www_worldnova_org_rss_p hp_cat=1.xml

    thank you for your quick answer,
    i'm gonna try what you told me
    cordially,
    Thomas.

    Добавлено через 1 час 31 минуту

    I have sent the quarantined zip file:

    File saved as 091020_224417_quarantine_4ade0501a81ea.zip
    File size 16228
    MD5 8c93f83467e30fb721a044fd090d523f

    Disk I is a removable hard disk,i don't think it is the source of the problem because it is not plugged all the time.When it's not i have the same problems.

    Many thanks in advance.
    Последний раз редактировалось bodacious; 20.10.2009 в 21:57. Причина: Добавлено

  4. #4
    Senior Member Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Репутация Аватар для drongo
    Регистрация
    17.09.2004
    Адрес
    Israel
    Сообщений
    7,165
    Вес репутации
    972
    Please run some program for temporary files cleaning. I like: http://www.ccleaner.com/download/bui...oadbinportable Just unzip it to new folder, and click on exe...Then click on button Run Ccleaner.

    Only after cleaning, please make an another log with avptool like you did in your first post and attach it to next post, i would like to see the difference between them.

Похожие темы

  1. Ответов: 1
    Последнее сообщение: 14.11.2010, 18:32
  2. Ответов: 14
    Последнее сообщение: 22.10.2010, 20:47
  3. Ищу описание Trojan.Win32.Scar.Btuw, Trojan.MulDrop, Trojan.Siggen1, Trojan.PWS.Ibank
    От v119 в разделе Описания вредоносных программ
    Ответов: 1
    Последнее сообщение: 15.03.2010, 13:56
  4. Ответов: 4
    Последнее сообщение: 22.02.2009, 03:31
  5. Ответов: 11
    Последнее сообщение: 22.02.2009, 03:25

Свернуть/Развернуть Ваши права в разделе

  • Вы не можете создавать новые темы
  • Вы не можете отвечать в темах
  • Вы не можете прикреплять вложения
  • Вы не можете редактировать свои сообщения
  •  
Page generated in 0.00058 seconds with 17 queries