GeekPolice
Welcome to GeekPolice.net!

GeekPolice is a website which provides free Computer Technical Support & Virus/Spyware Removal to our members.

You are currently viewing the forum as "Guest" which doesn't give you the same privilege as members to ask questions or post comments.

Click the Register button below to unlock the limitations of this website and start asking questions to discover new computer knowledge!

trojan and virus overload

Post new topic   Reply to topic

Page 2 of 2 Previous  1, 2

View previous topic View next topic Go down

Re: trojan and virus overload

Post by DragonMaster Jay on Tue 03 Nov 2009, 9:28 pm

Please delete this file manually: c:\windows\system32\dllcache\oleacc.dll

______________________________


[You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.]

DragonMaster Jay

Moderator | Tech Staff
Moderator | Tech Staff

Posts: 2132
Joined: 2009-09-06
Operating System: Windows 7 Ultimate 32-Bit

View user profile http://www.twitter.com/dragonmasterjay

Back to top Go down

Re: trojan and virus overload

Post by adamjac on Tue 03 Nov 2009, 11:30 pm

It seems to have succesfully deleted. i search all my files and it showed no results. not sure if it made a difference but i deleted it using mcafee shredder with 10 passes. it just sounded better but maybe im easy to fool. Please let me know if there is anything else i should do. Again, thanks to all that make this site what it is.

adamjac

Newbie Surfer
Newbie Surfer

Posts: 13
Joined: 2009-10-22
Operating System: xp pro

View user profile

Back to top Go down

Re: trojan and virus overload

Post by DragonMaster Jay on Wed 04 Nov 2009, 12:27 am

Oh good. I was expecting it to give a little trouble deleting. Luckily you had that, otherwise Malwarebytes has a built-in FileAssassin tool that works similarly. Just need a good virus scan to make sure the malware is gone:

Please do a scan with [You must be registered and logged in to see this link.]

Click on the Accept button and install any components it needs.

  • The program will install and then begin downloading the latest definition files.
  • After the files have been downloaded on the left side of the page in the Scan section select My Computer.
  • This will start the program and scan your system.
  • The scan will take a while, so be patient and let it run.
  • Once the scan is complete, click on View scan report
  • Now, click on the Save Report as button.
  • Save the file to your desktop.
  • Copy and paste that information in your next post.

______________________________


[You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.]

DragonMaster Jay

Moderator | Tech Staff
Moderator | Tech Staff

Posts: 2132
Joined: 2009-09-06
Operating System: Windows 7 Ultimate 32-Bit

View user profile http://www.twitter.com/dragonmasterjay

Back to top Go down

Re: trojan and virus overload

Post by adamjac on Wed 04 Nov 2009, 7:12 pm

Hello again,

I tried to use the Kaspersky scanner but i keep receiving an error message that says"Launch of the Java application is interrupted! Please establish an uninterrupted Internet connection for work with this program."

I went to the Java website and installed the program from them so it should be working fine. Other than that i am at a loss about how i have an interrupted internet connection. ? Have any suggestions? Hope im just missing something. thank you

adamjac

Newbie Surfer
Newbie Surfer

Posts: 13
Joined: 2009-10-22
Operating System: xp pro

View user profile

Back to top Go down

Re: trojan and virus overload

Post by DragonMaster Jay on Wed 04 Nov 2009, 8:56 pm

Try this:

Please run a free online scan with the [You must be registered and logged in to see this link.]
Note: You will need to use Internet Explorer for this scan

  • Tick the box next to YES, I accept the Terms of Use
  • Click Start
  • When asked, allow the ActiveX control to install
  • Click Start
  • Make sure that the options Remove found threats and the option Scan unwanted applications is checked
  • Click Scan (This scan can take several hours, so please be patient)
  • Once the scan is completed, you may close the window
  • Use Notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
  • Copy and paste that log as a reply to this topic

______________________________


[You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.]

DragonMaster Jay

Moderator | Tech Staff
Moderator | Tech Staff

Posts: 2132
Joined: 2009-09-06
Operating System: Windows 7 Ultimate 32-Bit

View user profile http://www.twitter.com/dragonmasterjay

Back to top Go down

Re: trojan and virus overload

Post by adamjac on Thu 05 Nov 2009, 7:35 am

OK that scanner worked and here are the results

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=7
# iexplore.exe=7.00.6000.16876 (vista_gdr.090625-2339)
# OnlineScanner.ocx=1.0.0.6211
# api_version=3.0.2
# EOSSerial=a8da0b40c7578c4f8eebe2b325b60893
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2009-11-05 06:18:04
# local_time=2009-11-05 12:18:04 (-0600, Central Standard Time)
# country="United States"
# lang=1033
# osver=5.1.2600 NT Service Pack 3
# compatibility_mode=5121 16776613 100 96 0 9397925 0 0
# compatibility_mode=8192 67108863 100 0 0 0 0 0
# scanned=129010
# found=5
# cleaned=5
# scan_time=9085
C:\Documents and Settings\Adam\Desktop\SDFix.exe Win32/PrcView application (deleted - quarantined) 00000000000000000000000000000000 C
C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\iaStor.sys.vir Win32/Olmarik.OF virus (deleted - quarantined) 00000000000000000000000000000000 C
C:\SDFix\apps\Process.exe Win32/PrcView application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP13\A0000872.exe Win32/PrcView application (deleted - quarantined) 00000000000000000000000000000000 C
C:\System Volume Information\_restore{129201FA-B0AC-49B3-96B2-DEB8B91E727B}\RP13\A0000873.exe Win32/PrcView application (cleaned by deleting - quarantined) 00000000000000000000000000000000 C

adamjac

Newbie Surfer
Newbie Surfer

Posts: 13
Joined: 2009-10-22
Operating System: xp pro

View user profile

Back to top Go down

Re: trojan and virus overload

Post by DragonMaster Jay on Thu 05 Nov 2009, 10:09 am

Download Security Check by screen317 from [You must be registered and logged in to see this link.] or [You must be registered and logged in to see this link.].
  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

______________________________


[You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.]

DragonMaster Jay

Moderator | Tech Staff
Moderator | Tech Staff

Posts: 2132
Joined: 2009-09-06
Operating System: Windows 7 Ultimate 32-Bit

View user profile http://www.twitter.com/dragonmasterjay

Back to top Go down

Re: trojan and virus overload

Post by adamjac on Thu 05 Nov 2009, 11:56 am

I ran the check, it said it can't find server name for adress192.168.0.1: Non-existent domain. Default servers are not available. other than that here is the log info


Results of screen317's Security Check version 0.99.0
Windows XP Service Pack 3
``````````````````````````````
Antivirus/Firewall Check:

Windows Firewall Disabled!
ESET Online Scanner v3
McAfee SecurityCenter
McAfee Virtual Technician
Pathophysiology
Antivirus up to date!
``````````````````````````````
Anti-malware/Other Utilities Check:

Java(TM) 6 Update 17
Java(TM) 6 Update 2
Java(TM) 6 Update 3
Java(TM) 6 Update 5
Java 2 Runtime Environment, SE v1.4.2_03
Out of date Java installed!
Adobe Flash Player 10
Adobe Atmosphere Player for Acrobat and Adobe Reader
Adobe Reader 9.1.3
``````````````````````````````
Process Check:
objlist.exe by Laurent

McAfee VIRUSS~1 mcshield.exe
McAfee VIRUSS~1 mcsysmon.exe
``````````````````````````````
DNS Vulnerability Check:

GREAT! (Not vulnerable to DNS cache poisoning)

`````````End of Log```````````


Hope everything is looking better couldn't of done it without you THANK YOU

adamjac

Newbie Surfer
Newbie Surfer

Posts: 13
Joined: 2009-10-22
Operating System: xp pro

View user profile

Back to top Go down

Re: trojan and virus overload

Post by DragonMaster Jay on Thu 05 Nov 2009, 6:19 pm

To remove all of the tools we used and the files and folders they created do the following:
Double click OTM.exe.

  • Click the CleanUp button.
  • Select Yes when the "Begin cleanup Process?" prompt appears.
  • If you are prompted to Reboot during the cleanup, select Yes.
  • The tool will delete itself once it finishes.


==

Please download the newest version of Java from [You must be registered and logged in to see this link.].

Before installing: it is important to remove older versions of Java since it does not do so automatically and old versions still leave you vulnerable.
Go to the Control Panel and enter Add or Remove Programs.
Search in the list for all previous installed versions of Java. (J2SE Runtime Environment). Please uninstall/remove each of them.

Once old versions are gone, please install the newest version.

==

Please read the following information that I have provided, which will help you prevent malicious software in the future. Please keep in mind, malware is a continuous danger on the Internet. It is highly important to stay safe while browsing, to prevent re-infection.

Software recommendations

AntiSpyware

  • [You must be registered and logged in to see this link.]
    SpywareBlaster is a program that prevents spyware from installing on your computer. A tutorial on using SpywareBlaster may be found [You must be registered and logged in to see this link.].
  • [You must be registered and logged in to see this link.].
    Spybot - Search & Destroy is a spyware and adware removal program. It also has realtime protection, TeaTimer to help safeguard your computer against spyware. (The link for Spybot - Search & Destroy contains a tutorial that will help you download, install, and begin using Spybot).


NOTE: Please keep ALL of these programs up-to-date and run them whenever you suspect a problem to prevent malware problems.

Resident Protection help
A number of programs have resident protection and it is a good idea to run the resident protection of one of each type of program to maintain protection. However, it is important to run only one resident program of each type since they can conflict and become less effective. That means only one antivirus, firewall, and scanning anti-spyware program at a time. Passive protectors such as SpywareBlaster can be run with any of them.

Rogue programs help
There are a lot of rogue programs out there that want to scare you into giving them your money and some malware actually claims to be security programs. If you get a popup for a security program that you did not install yourself, do NOT click on it and ask for help immediately. It is very important to run an antivirus and firewall, but you can't always rely on reviews and ads for information. Ask in a security forum that you trust if you are not sure. If you are unsure and looking for anti-spyware programs, you can find out if it is a rogue here:
[You must be registered and logged in to see this link.]

Securing your computer

  • [You must be registered and logged in to see this link.] - It is very important to make sure that both Internet Explorer and Windows are kept current with the latest critical security patches from Microsoft. To do this just start Internet Explorer and select Tools > Windows Update, and follow the online instructions from there.
  • [You must be registered and logged in to see this link.] replaces your current HOSTS file with one containing well known ad sites and other bad sites. This prevents your computer from connecting to those sites by redirecting them to 127.0.0.1, which is your local computer's loopback address, meaning it will be difficult to infect your computer in the future.


Please consider using an alternate browser
Mozilla's Firefox browser is a very good alternative. In addition to being generally more secure than Internet Explorer, it has a very good built-in popup blocker and add-ons, like NoScript, can make it even more secure. Opera is another good option.

If you are interested:


Thank you for choosing GeekPolice. Please see [You must be registered and logged in to see this link.] if you would like to leave feedback or contribute to our site. Do you have any more questions?

______________________________


[You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.]

DragonMaster Jay

Moderator | Tech Staff
Moderator | Tech Staff

Posts: 2132
Joined: 2009-09-06
Operating System: Windows 7 Ultimate 32-Bit

View user profile http://www.twitter.com/dragonmasterjay

Back to top Go down

Re: trojan and virus overload

Post by adamjac on Thu 05 Nov 2009, 8:36 pm

THANK YOU VERY MUCH for all your time and help. Your advice has been priceless, and a big learning experience for me. If i can only retain half of what you probably forgot then i will be ok. Im a man of my word, so when its possible i will donate what i can, because you guys are awesome. I plan on keeping up my registration and hopefully someday i can lend a hand to help someone. Best of all my three girls are happy that dad will let them on the computer again, thanks a million. ADAM

adamjac

Newbie Surfer
Newbie Surfer

Posts: 13
Joined: 2009-10-22
Operating System: xp pro

View user profile

Back to top Go down

Page 2 of 2 Previous  1, 2

View previous topic View next topic Back to top


Permissions of this forum:
You cannot reply to topics in this forum