« previous next »
Pages: 1 [2] 3 4 ... 7   Go Down

Author Topic: New Virus?  (Read 25054 times)

0 Members and 1 Guest are viewing this topic.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: New Virus?
« Reply #15 on: September 24, 2011, 11:07:03 PM »
Subtle difference in climate I should imagine  ;D
Logged

RoughDobermann

  • Guest
Re: New Virus?
« Reply #16 on: September 24, 2011, 11:07:49 PM »
Quote from: essexboy on September 24, 2011, 11:07:03 PM
Subtle difference in climate I should imagine  ;D

Yes, 330+ days of sunshine was hard to get used to!   ;D
Logged

RoughDobermann

  • Guest
Re: New Virus?
« Reply #17 on: September 25, 2011, 04:10:26 PM »
Should I run ComboFix now?
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: New Virus?
« Reply #18 on: September 25, 2011, 04:55:08 PM »
Yes please  ;D
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: New Virus?
« Reply #19 on: September 25, 2011, 04:56:57 PM »
Quote
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - mswsock.dll File not found
This is the problem - alas TDSSKiller is not yet up to removing the complete zero access
Logged

RoughDobermann

  • Guest
Re: New Virus?
« Reply #20 on: September 25, 2011, 05:08:03 PM »
Still rename Combofix to svchost?
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: New Virus?
« Reply #21 on: September 25, 2011, 05:09:35 PM »
No requirement now as the main bad boy has gone
Logged

RoughDobermann

  • Guest
Re: New Virus?
« Reply #22 on: September 25, 2011, 05:22:15 PM »
I still have Symantec Antivirus Corporate running, but don't see a way to end/disable it in the client or taskbar.  How do I disable it?  The link on the previous page to help with this is dead.
Logged

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37527
  • Not a avast user
Re: New Virus?
« Reply #23 on: September 25, 2011, 05:27:13 PM »
Logged

RoughDobermann

  • Guest
Re: New Virus?
« Reply #24 on: September 25, 2011, 05:28:41 PM »
Is there a way to just stop/disable it rather than uninstalling it?  This a work machine.
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: New Virus?
« Reply #25 on: September 25, 2011, 05:29:31 PM »
Run combofix but do not allow Norton to quarantine or stop any files running  ;D
Logged

RoughDobermann

  • Guest
Re: New Virus?
« Reply #26 on: September 25, 2011, 05:33:55 PM »
Quote from: essexboy on September 25, 2011, 05:29:31 PM
Run combofix but do not allow Norton to quarantine or stop any files running  ;D

Is it going to "tell" me if it tries that?  Honestly, I've never seen Symantec (Norton?) do anything.  I didn't even know it was installed!   :P
Logged

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: New Virus?
« Reply #27 on: September 25, 2011, 05:36:50 PM »
Yes there may be notifications - just click ignore
Logged

RoughDobermann

  • Guest
Re: New Virus?
« Reply #28 on: September 25, 2011, 06:07:10 PM »
Quote from: essexboy on September 25, 2011, 05:36:50 PM
Yes there may be notifications - just click ignore

Okay, Combofix ran and produced this report.  I still don't have Internet access, however.
Logged

Paul Rodgers

  • Guest
Re: New Virus?
« Reply #29 on: September 25, 2011, 06:11:14 PM »
Quote from: RoughDobermann on September 25, 2011, 06:07:10 PM
Quote from: essexboy on September 25, 2011, 05:36:50 PM
Yes there may be notifications - just click ignore

Okay, Combofix ran and produced this report.  I still don't have Internet access, however.

I had to fix this same rootkit. If I remember correctly Combofix tells you to run it again if you don't have internet access. You can also try a repair install.
Logged
Pages: 1 [2] 3 4 ... 7   Go Up
« previous next »