Avast community forum
Home
Help
Search
Login
Register
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
worm?
« previous
next »
Print
Pages: [
1
]
Go Down
Author
Topic: worm? (Read 4824 times)
0 Members and 1 Guest are viewing this topic.
angel1234
Guest
worm?
«
on:
February 20, 2008, 10:23:42 PM »
Hi, On my other computer....It has some kind of worm it pops up an error message, countdown Avast! disabled...
I do not know how I got infected
Logged
CharleyO
Guest
Re: worm?
«
Reply #1 on:
February 20, 2008, 11:29:57 PM »
***
Please download HijackThis from the link below, run the program but do not make any fixes, and then post the log results in this thread using the "copy & paste" method. It will probably take more than one post to be able to get the complete log posted. Someone will review your log and then offer help.
http://filehippo.com/download_hijackthis/
***
Logged
Lisandro
Avast team
Certainly Bot
Posts: 67194
Re: worm?
«
Reply #2 on:
February 21, 2008, 12:04:10 AM »
I suggest:
1. Disable System Restore and reenable it after step 3.
2. Clean your temporary files.
3. Schedule a boot time scanning with avast with archive scanning turned on.
4. Use
SUPERantispyware
and/or
Spyware Terminator
to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
5. Test your machine with
anti-rootkit applications
. I suggest
AVG
or
Trend Micro RootkitBuster
.
6. Like Charley asked, make a
HijackThis
log to post here or, better, submit the
RunScanner
log to to on-line analysis.
7. Immunize your system with
SpywareBlaster
or
Windows Advanced Care
.
8. Check if you have insecure applications with
Secunia Software Inspector
.
Logged
The best things in life are free.
angel1234
Guest
Re: worm?
«
Reply #3 on:
February 22, 2008, 01:17:40 AM »
Tech-it disables system restore
Logged
oldman
Avast Evangelist
Massive Poster
Posts: 4142
Some days..... MOS...this bug's for you
Re: worm?
«
Reply #4 on:
February 22, 2008, 01:26:39 AM »
Please download ComboFix from
Here
or
Here
to your Desktop.
**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
Please, never rename Combofix unless instructed.
Close any open browsers.
Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
-----------------------------------------------------------
Very Important!
Temporarily
disable
your
anti-virus
,
script blocking
and any
anti-malware
real-time protection
before
performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause
"unpredictable results"
.
Click on
this link
to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
[/color]
-----------------------------------------------------------
Close any open browsers.
WARNING:
Combofix will disconnect your machine from the Internet as soon as it starts
Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
-----------------------------------------------------------
Double click on
combofix.exe
& follow the prompts.
When finished, it will produce a report for you.
Please post the
"C:\ComboFix.txt"
along with a
new HijackThis log
for further review.
**Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**
And please post the HJT log CharleyO requested.
Logged
angel1234
Guest
Re: worm?
«
Reply #5 on:
March 02, 2008, 10:01:05 PM »
Okay, thanks the malware already disabled my security tho *shrugs* whatever that thing is, it's scary.
Logged
oldman
Avast Evangelist
Massive Poster
Posts: 4142
Some days..... MOS...this bug's for you
Re: worm?
«
Reply #6 on:
March 02, 2008, 10:04:06 PM »
Well then run combofix and we'll see what turns up.
Logged
angel1234
Guest
Re: worm?
«
Reply #7 on:
March 02, 2008, 10:29:55 PM »
Heh heh I'm too scared to turn on that computer lol...>.>
Logged
oldman
Avast Evangelist
Massive Poster
Posts: 4142
Some days..... MOS...this bug's for you
Re: worm?
«
Reply #8 on:
March 02, 2008, 10:35:09 PM »
Well. I don't really see any way of cleaning it out then.
Logged
angel1234
Guest
Re: worm?
«
Reply #9 on:
March 02, 2008, 10:37:56 PM »
Heh heh......I'll feel better if I do it in safe mode..Can I?
Logged
oldman
Avast Evangelist
Massive Poster
Posts: 4142
Some days..... MOS...this bug's for you
Re: worm?
«
Reply #10 on:
March 02, 2008, 11:20:54 PM »
Yes you can.
combofix works very well in safe mode. But you will have to be in normal windows to post the log. I will also require a HJT log from normal windows.
Logged
Print
Pages: [
1
]
Go Up
« previous
next »
Avast WEBforum
»
Other
»
Viruses and worms
(Moderators:
Maxx_original
,
misak
) »
worm?