lesser-equity

Magazine
Go Back   Computer Juice > Computer Software > Virus, Spyware & Security

Register


 Default 

Trojan Winzix and Consequences.




Reply
 
Thread Tools
  #11  
Old 20th Feb 2009, 17:50
Member Group
 
Default Trojan Winzix and Consequences.

As i told you before everything seems normal.The only problems that i had was the pop-uop windows and the memory usage from iexplore.exe.Now,it is like nothing never happened. ;)





========== PROCESSES ==========
Process explorer.exe killed successfully.
========== FILES ==========
c:\windows\DXT110.tmp moved successfully.
c:\windows\DXT10F.tmp moved successfully.
========== COMMANDS ==========
File delete failed. C:\DOCUME~1\DIMOST~1\LOCALS~1\Temp\etilqs_PWoug16k Qj3LxnnHJ3DW scheduled to be deleted on reboot.
File delete failed. C:\DOCUME~1\DIMOST~1\LOCALS~1\Temp\Perflib_Perfdat a_c60.dat scheduled to be deleted on reboot.
User's Temp folder emptied.
User's Temporary Internet Files folder emptied.
User's Internet Explorer cache folder emptied.
Local Service Temp folder emptied.
Local Service Temporary Internet Files folder emptied.
File delete failed. C:\WINDOWS\temp\Perflib_Perfdata_4b0.dat scheduled to be deleted on reboot.
Windows Temp folder emptied.
Java cache emptied.
File delete failed. C:\Documents and Settings\Dimosthenis\Local Settings\Application Data\Mozilla\Firefox\Profiles\ooz9y2cc.default\Cac he\_CACHE_001_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Dimosthenis\Local Settings\Application Data\Mozilla\Firefox\Profiles\ooz9y2cc.default\Cac he\_CACHE_002_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Dimosthenis\Local Settings\Application Data\Mozilla\Firefox\Profiles\ooz9y2cc.default\Cac he\_CACHE_003_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Dimosthenis\Local Settings\Application Data\Mozilla\Firefox\Profiles\ooz9y2cc.default\Cac he\_CACHE_MAP_ scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Dimosthenis\Local Settings\Application Data\Mozilla\Firefox\Profiles\ooz9y2cc.default\url classifier3.sqlite scheduled to be deleted on reboot.
File delete failed. C:\Documents and Settings\Dimosthenis\Local Settings\Application Data\Mozilla\Firefox\Profiles\ooz9y2cc.default\XUL .mfl scheduled to be deleted on reboot.
FireFox cache emptied.
Temp folders emptied.
Explorer started successfully

OTMoveIt3 by OldTimer - Version 1.0.8.0 log created on 02212009_024727
  #12  
Old 20th Feb 2009, 17:59
Moderator Group
 
Default Trojan Winzix and Consequences.

Sounds good. Time to finish up.
  • Click START then RUN
  • Now type Combofix /u in the runbox
  • Make sure there's a space between Combofix and /u
  • Then hit Enter.
The above procedure will:
  • Delete:
    • ComboFix and its associated files and folders.
    • VundoFix backups, if present
    • The C:\Deckard folder, if present
    • The C:_OtMoveIt folder, if present
  • Reset the clock settings.
  • Hide file extensions, if required.
  • Hide System/Hidden files, if required.
  • Set a new, clean Restore Point.

----------

1. Double click OTMoveIt3.exe to launch it.
Vista users right click and choose Run As Administrator
2. Click on the CleanUp! button.
3. OTMoveIt3 will download a list from the Internet, if your firewall or other defensive programs alerts you, allow it access.
4. Click YES at the next prompt (list downloaded, Do you want to begin cleanup process?)
  • When finished exit out of OTMoveIt3

----------

Next: Set a New Restore Point to prevent possible reinfection from an old one.

Please go to: Start -> All Programs -> Accessories -> System Tools -> System Restore -> System Restore Settings
Click to add a check mark beside Turn off System Restore and click Apply
When you are warned that all existing Restore Points will be deleted, click Yes to continue and wait a few moments to let System Restore clear.
Uncheck "Turn off System Restore"
Click "Apply," and then click "OK".

----------

Use the Secunia Software Inspector to check for out of date software.
Out of date software has security vulnerabilities that malware can exploit.
  • Click Start Now
  • Check the box next to Enable thorough system inspection.
  • Click Start
  • Allow the scan to finish and scroll down to see if any updates are needed.
  • Update anything listed.

----------

Go to Microsoft Windows Update and get all critical updates.

----------

Here are some great FREE tools to help you keep from getting infected again. These tools use little or no resources so won't slow down your PC.

I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

SpywareBlaster - Secure your Internet Explorer to make it harder for these ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
* Using SpywareBlaster to protect your computer from Spyware and Malware
* If you don't know what ActiveX controls are, see here

Check out Keeping Yourself safe On The Web for tips and free tools to keep you safe in the future.

Also see Slow Computer? It May Not Be Malware for free cleaning/maintenance tools to help keep your computer running smooth.
__________________

  #13  
Old 20th Feb 2009, 18:17
Member Group
 
Default Trojan Winzix and Consequences.

OK evilfantasy!I really really want to thank you for spending your time solving my problems!I appreciate it,and i think i know where i should ask for help from now on ;P.
  #14  
Old 20th Feb 2009, 18:42
Moderator Group
 
Default Trojan Winzix and Consequences.

Your welcome.

Safe surfing...
__________________

Reply

Register
Thread Tools




Arabic Bulgarian Chinese (Simplified) Chinese (Traditional) Croatian Czech Danish Dutch English Finnish French German Greek Hebrew Hungarian Italian Japanese Korean Latvian Lithuanian Norwegian Polish Portuguese Romanian Russian Serbian Slovak Spanish Swedish Thai Turkish Ukrainian

Copyright ©2006 - 2009 Computer Juice.

Powered by vBulletin® Copyright ©2000 - 2009 Jelsoft Enterprises Ltd. SEO by vBSEO ©2009, Crawlability, Inc.