Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Trojans cleaned, modified windows.  (Read 19655 times)

0 Members and 1 Guest are viewing this topic.

SalP

    Topic Starter


    Rookie
    • Experience: Familiar
    • OS: Windows 7
    Re: Trojans cleaned, modified windows.
    « Reply #15 on: January 14, 2012, 02:32:37 PM »
    Still scanning, but it looks like it picked up 2 trojans in Java.

    SalP

      Topic Starter


      Rookie
      • Experience: Familiar
      • OS: Windows 7
      Re: Trojans cleaned, modified windows.
      « Reply #16 on: January 14, 2012, 03:16:01 PM »
      Quote
      C:\ProgramData\YouTube Downloader\ytd_installer.exe   a variant of Win32/Toolbar.Widgi application   deleted - quarantined
      C:\Users\Sal\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\46\5522c76e-4a9801b9   Java/Exploit.CVE-2011-3544.T trojan   deleted - quarantined
      C:\Users\Sal\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\5\44d5d945-5e4c9667   Java/Agent.EA trojan   deleted - quarantined

      I deleted the offending program, cleared out the Java cache, and updated Java.
      « Last Edit: January 14, 2012, 03:47:18 PM by SalP »

      SuperDave

      • Malware Removal Specialist


      • Genius
      • Thanked: 1020
      • Certifications: List
      • Experience: Expert
      • OS: Windows 10
      Re: Trojans cleaned, modified windows.
      « Reply #17 on: January 14, 2012, 06:57:27 PM »
      Great. If there are no other issues we can do some cleanup.

      Delete the Combo-Fix.exe file, c:\users\Sal\Downloads\Combo-Fix folder, c:\users\Sal\Downloads\QooBox folder, C:\WINDOWS\nircmd.exe, c:\users\Sal\Downloads:\combo-fix.txt and c:\users\Sal\Downloads\Combo-Fix-quarantined-files.txt
      You may have a problem deleting one of the folders. In that case, just empty the folder of whatever files you can and leave it.
      ***************************************************
      To set a new Restore Point.

      Click Start button , click Control Panel, click System and Maintenance, and then clicking System. In the left pane, click System Protection.  If you are prompted for an administrator password or confirmation, type the password or provide confirmation. To turn off System Protection for a hard disk, clear the check box next to the disk, and then click OK. Reboot to Normal Mode.
      Click the Start button , click Control Panel, click System and Maintenance, and then click System.
      In the left pane, click System Protection.  If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
      To turn on System Protection for a hard disk, select the check box next to the disk, and then click OK.
      This will give you a new, clean Restore Point.
      *******************************************************
      Clean out your temporary internet files and temp files.

      Download TFC by OldTimer to your desktop.

      Double-click TFC.exe to run it.

      Note: If you are running on Vista, right-click on the file and choose Run As Administrator

      TFC will close all programs when run, so make sure you have saved all your work before you begin.

      * Click the Start button to begin the cleaning process.
      * Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two.
      * Please let TFC run uninterrupted until it is finished.

      Once TFC is finished it should restart your computer. If it does not, please manually restart the computer yourself to ensure a complete cleaning.
      ******************************************************
      Go to Microsoft Windows Update and get all critical updates.

      ----------

      I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

      SpywareBlaster- Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
      * Using SpywareBlaster to protect your computer from Spyware and Malware
      * If you don't know what ActiveX controls are, see here

      Protect yourself against spyware using the Immunize feature in Spybot - Search & Destroy. Guide: Use Spybot's Immunize Feature to prevent spyware infection in real-time. Note: To ensure you have the latest Immunizations always update Spybot - Search & Destroy before Immunizing. Spybot - Search & Destroy FAQ

      Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

      Also see Slow Computer? It may not be Malware for free cleaning/maintenance tools to help keep your computer running smoothly.
      Safe Surfing!
      Windows 8 and Windows 10 dual boot with two SSD's