Go Back   Computer Juice > Computer Software > Virus, Spyware & Security
Register Members New Posts Donate Unanswered Posts Site Spy Search


Reply
 
Thread Tools
  #1  
Old 25-11-2007, 05:50 PM
No Avatar
Miike  Canada
CJ New Member
 
Miike is offline
 
Join Date: Nov 2007
Last Online: 25-11-2007 07:50 PM
Posts: 7
iTrader: (0)
Miike is on a distinguished road
Default The Jokwmp

This virus brings up files and internet web pages ever so often. It also changes your defult homepage to this <EDIT> site. It changes your background to a red Privacy danger sign. Here is the log :
log.txt

Do not post infected sites.

Last edited by evilfantasy : 25-11-2007 at 06:14 PM.
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #2  
Old 25-11-2007, 06:23 PM
evilfantasy's Avatar
CJ Moderator
Intel ATi
evilfantasy is online now
Send a message via Yahoo to evilfantasy
 
Join Date: Jul 2007
Last Online: Today 05:08 AM
Posts: 4,605
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default The Jokwmp

You shouldn't run any tools not mentioned in the Malware Removal Guide thread. It can be dangerous and cause removal to be more difficult.

I need the logs from here >> Malware Removal Guide - Please Read Before Posting
__________________
.
.
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #3  
Old 25-11-2007, 06:26 PM
No Avatar
Miike  Canada
CJ New Member
 
Miike is offline
 
Join Date: Nov 2007
Last Online: 25-11-2007 07:50 PM
Posts: 7
iTrader: (0)
Miike is on a distinguished road
Default The Jokwmp

When i click on either of those links it automaticly sends me to Thecomputerforums homepage.
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #4  
Old 25-11-2007, 06:29 PM
evilfantasy's Avatar
CJ Moderator
Intel ATi
evilfantasy is online now
Send a message via Yahoo to evilfantasy
 
Join Date: Jul 2007
Last Online: Today 05:08 AM
Posts: 4,605
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default The Jokwmp

Sorry, try this. Click Here
__________________
.
.
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #5  
Old 25-11-2007, 06:38 PM
No Avatar
Miike  Canada
CJ New Member
 
Miike is offline
 
Join Date: Nov 2007
Last Online: 25-11-2007 07:50 PM
Posts: 7
iTrader: (0)
Miike is on a distinguished road
Default The Jokwmp

Logfile of Trend Micro HijackThis v2.0.2
Attached Files
File Type: txt Miike.txt (5.6 KB, 19 views)

Last edited by evilfantasy : 25-11-2007 at 06:44 PM. Reason: removed inline log
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #6  
Old 25-11-2007, 06:53 PM
No Avatar
Miike  Canada
CJ New Member
 
Miike is offline
 
Join Date: Nov 2007
Last Online: 25-11-2007 07:50 PM
Posts: 7
iTrader: (0)
Miike is on a distinguished road
Default The Jokwmp

Theres the log, any idea what I should do?
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #7  
Old 25-11-2007, 06:54 PM
evilfantasy's Avatar
CJ Moderator
Intel ATi
evilfantasy is online now
Send a message via Yahoo to evilfantasy
 
Join Date: Jul 2007
Last Online: Today 05:08 AM
Posts: 4,605
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default The Jokwmp

Print these instructions out or copy and paste them to notepad and save it to the desktop. You will not be able to see this page from safe mode.

Download SDFix.exe and save it to your Desktop.

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Please then reboot your computer in Safe Mode by doing the following:
* Restart your computer
* After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
* Instead of Windows loading as normal, the Advanced Options Menu should appear;
* Select the first option, to run Windows in Safe Mode, then press Enter.
* Choose your usual account.
* Open the extracted SDFix folder and double click RunThis.bat to start the script.
* Type Y to begin the cleanup process.
* It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
* Press any Key and it will restart the PC.
* When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
*] Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
(Report.txt will also be copied to Clipboard).
* Finally add the contents of the Report.txt in your next post as an Attachment with a new HijackThis log

=====

Next Post please add as attachments
Report.txt
New HijackThis log

__________________
.
.
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #8  
Old 25-11-2007, 07:31 PM
No Avatar
Miike  Canada
CJ New Member
 
Miike is offline
 
Join Date: Nov 2007
Last Online: 25-11-2007 07:50 PM
Posts: 7
iTrader: (0)
Miike is on a distinguished road
Default The Jokwmp

Here you go.
report.txt
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #9  
Old 25-11-2007, 07:35 PM
evilfantasy's Avatar
CJ Moderator
Intel ATi
evilfantasy is online now
Send a message via Yahoo to evilfantasy
 
Join Date: Jul 2007
Last Online: Today 05:08 AM
Posts: 4,605
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default The Jokwmp

Need a new HijackThis log
__________________
.
.
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote
  #10  
Old 25-11-2007, 07:38 PM
No Avatar
Miike  Canada
CJ New Member
 
Miike is offline
 
Join Date: Nov 2007
Last Online: 25-11-2007 07:50 PM
Posts: 7
iTrader: (0)
Miike is on a distinguished road
Default The Jokwmp

How do I do that?
Sorry for my stupidity, I'm not used to this kind of stuff.
Digg this postDel.icio.us this postTechnorati this postNetscape this postStumble this post
Reply With Quote

Please support this forum, donate towards our running costs.


Reply


Thread Tools

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
The Jokwmp - is it gone?? slun80 Virus, Spyware & Security 6 27-11-2007 02:22 AM


Copyright ©2006 - 2008 Computer Juice.

Powered by vBulletin® Copyright ©2000 - 2008 Jelsoft Enterprises Ltd. SEO by vBSEO ©2008, Crawlability, Inc.

Page copy protected against web site content infringement by Copyscape