My Computer Suddenly Install DianXin.exe

[TokeiLampin]

After donno where it comes from can someone teach me how to uninstall this thing..coz afraid wrong tick it become worst.

[Secondmineboy]

Hi,

follow this guide and attach logs from OTL, Malwarebytes and aswMBR:

http://forum.avast.com/index.php?topic=53253.0

[TokeiLampin]

OTL

[essexboy]

It does not appear to be active

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  
  

Code: [Select]

:Commands
[CREATERESTOREPOINT]

:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\GVR\geekzd.dll -- (SuperKillFile)
[2014/02/28 00:39:18 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Seven By Four\Application Data\DianXin
[2014/02/28 00:39:17 | 000,000,000 | ---D | C] -- C:\Program Files\DianXin
[2014/02/28 00:39:29 | 000,000,684 | ---- | C] () -- C:\Documents and Settings\Seven By Four\Application Data\Microsoft\Internet Explorer\Quick Launch\µãÐÄä?ÀÀÆ÷.lnk

:Files
C:\Program Files\Common Files\ITui
C:\Program Files\GVR

:Commands
[resethosts]
[emptytemp]
[Reboot]

• Then click the Run Fix button at the top
  
• Let the program run unhindered, reboot the PC when it is done
• Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

[TokeiLampin]

Ai ai Captain essexboy ..i hope that not active..coz first time i notice i i see that small popup advertise show up on right corner then that DianXin already install

[essexboy]

Do you have any idea where you got that from, as I would like to check it out. 

Also set Avast to detect PUP's

[TokeiLampin]

Not idea captain i just popup suddenly when i just watch dvd fast and fourious 6..ok done already set it

[essexboy]

In that case it probably came with the video, was it a torrent ?

[TokeiLampin]

Nop it was DVD play from Dvd Player

[essexboy]

Hmm curious, did you have any web browser open in the background

[TokeiLampin]

Always monitor with procexp.exe but no other browser open..me got 4 browser but always open chroome and firefox only...but more chroome

[essexboy]

Download and run Delfix

[TokeiLampin]

Done captain