Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: apparently i have a trojan  (Read 9231 times)

0 Members and 1 Guest are viewing this topic.

JAJsangel

    Topic Starter


    Beginner
    • Experience: Familiar
    • OS: Windows 8
    apparently i have a trojan
    « on: February 05, 2009, 10:45:45 PM »
    My internet can run slow at times. i think it mostly happens when im browsing because videos will play fine, internet radio will run without any problem and most pages in general will work but when im searching through stuff like search pages and discography it goes slow. also when i load online housecall it gets done scanning but then the browser closes before fixing the problem.
    I found this site called pcpitstop and i downloaded pcpitstop exterminate. unfortunately i realized you have to pay for it so it can remove the problems. well i had scanned with that before i found this place so the minor things probly got eliminated by superantispyware, malwarebytes' or ccleaner. the results i got from it was trojan.zfsearch, my websearch toolbar, myfreeze/yourscreen, zango, cookie: tracking cookies.
    i keep getting rid of those cookies with superantispyware and ccleaner but they keep coming back. im guessing the trojan is installing more of them?

    If you didnt realize already, I already had superantispyware, ccleaner and malwarebytes' antimalware. I have been using ccleaner frequently and superantispyware every day. i had used malwarebytes' antimalware from time to time but i uninstalled it after a while since its not good to have two antivirus programs at the same time.
    I also have mcafee which was installed on the computer when i first got it. it has a firewall and ive had it turned on. id uninstall it since it sucks but idk if thats a good idea since it has the firewall.

    In case you need to know:
    I think I got this malware when I found this site where you win prizes if you get the high score on certain games. its called zango (thats why zango is obviously there) stupid me wanted an ipod so bad so i clicked it without questioning why it popped up uninvited.
    The malware might also be from a while back when I was trying to find a password decoder because customer service wouldnt help me at the time and I forgot my password from IMVU and i didnt have the email address I signed up with. Im not sure about it giving me malware though because I did not download anything. I just looked at this one site (sry i dont remember what its called. all i remember is i found it through google) but didnt go any further because the files looked suspicious to me.
    since my computer was running not as well as it should be i might have got more malware by trying to fix it. i remember seeing this ad on tv for a site that tells you all the problems with your computer. well i couldnt remember what it was so i tried searching for it on google. i found errordoctor and used that. well the tech chat room that i usually go to said thats not good. i tried to get rid of it with what they recommended: regclean and xoftspyse but regclean wont work and xoftspy you have to pay for in order for it to remove anything.
    Other than that Ive been careful.





    Attached are the logs for Superantispyware, Malwarebytes' Anti-Malware and HijackThis.



    [attachment deleted by admin]

    NinjaRicer



      Greenhorn

      Re: apparently i have a trojan
      « Reply #1 on: February 05, 2009, 11:29:22 PM »
      Try booting into safe mode then removing the trojan with those programs.

      evilfantasy

      • Malware Removal Specialist
      • Moderator


      • Genius
      • Calm like a bomb
      • Thanked: 493
      • Experience: Experienced
      • OS: Windows 11
      Re: apparently i have a trojan
      « Reply #2 on: February 06, 2009, 10:00:04 AM »
      Download random's system information tool (RSIT) by random/random from and save it to your Desktop.

      • Double click on RSIT.exe to run.
      • Click Continue at the disclaimer screen.
      • Once it has finished, two logs will open.
      • log.txt <will be maximized and info.txt <will be minimized
      • Please post the contents of both logs in the next reply.

      squall_01



        Prodigy

        Thanked: 80
        Re: apparently i have a trojan
        « Reply #3 on: February 06, 2009, 10:09:08 AM »
        Whats wrong with useing spybot.  I am no removal specialist but it hasnt steered me wrong yet.
        Windows 7 RC Tester.  Working on it.  Your monitor says etchasketch on the side!

        If I fall who is there to pick me up now.  I stand alone but I stand as the gaurdian for whom I wish to protect.  The sound of my blade utters my name as you fall.  For I shall not move.  For those that forsake the very people are wosres

        evilfantasy

        • Malware Removal Specialist
        • Moderator


        • Genius
        • Calm like a bomb
        • Thanked: 493
        • Experience: Experienced
        • OS: Windows 11
        Re: apparently i have a trojan
        « Reply #4 on: February 06, 2009, 10:12:12 AM »
        It's not powerful enough for the new forms of malware today. I use it but only for the Immunize feature.

        squall_01



          Prodigy

          Thanked: 80
          Re: apparently i have a trojan
          « Reply #5 on: February 06, 2009, 10:13:30 AM »
          Ah I see thats were a combo of tools can be used.  That should work in theiry shouldnt it?  Its not like an anti-virus program.
          Windows 7 RC Tester.  Working on it.  Your monitor says etchasketch on the side!

          If I fall who is there to pick me up now.  I stand alone but I stand as the gaurdian for whom I wish to protect.  The sound of my blade utters my name as you fall.  For I shall not move.  For those that forsake the very people are wosres

          evilfantasy

          • Malware Removal Specialist
          • Moderator


          • Genius
          • Calm like a bomb
          • Thanked: 493
          • Experience: Experienced
          • OS: Windows 11
          Re: apparently i have a trojan
          « Reply #6 on: February 06, 2009, 10:15:26 AM »
          ComboFix disclaimer. http://www.bleepingcomputer.com/combofix/how-to-use-combofix

          Quote
          You should not run ComboFix unless you are specifically asked to by a helper. Also, due to the power of this tool it is strongly advised that you do not attempt to act upon any of the information displayed by ComboFix without supervision from someone who has been properly trained. If you do so, it may lead to problems with the normal functionality of your computer.

          Please note that this guide is the only authorized guide for the use of ComboFix and cannot be copied without permission from BleepingComputer.com and sUBs. It is also understood that the use of ComboFix is done at your own risk.

          squall_01



            Prodigy

            Thanked: 80
            Re: apparently i have a trojan
            « Reply #7 on: February 06, 2009, 10:19:15 AM »
            Sorry I'll try an read that when i can an get back to you since I'm done for the week.  just let me know if this all works out for him  ;D
            Windows 7 RC Tester.  Working on it.  Your monitor says etchasketch on the side!

            If I fall who is there to pick me up now.  I stand alone but I stand as the gaurdian for whom I wish to protect.  The sound of my blade utters my name as you fall.  For I shall not move.  For those that forsake the very people are wosres

            JAJsangel

              Topic Starter


              Beginner
              • Experience: Familiar
              • OS: Windows 8
              Re: apparently i have a trojan
              « Reply #8 on: February 09, 2009, 03:25:32 PM »
              so I should use combofix, evilfantasy?







              [attachment deleted by admin]

              evilfantasy

              • Malware Removal Specialist
              • Moderator


              • Genius
              • Calm like a bomb
              • Thanked: 493
              • Experience: Experienced
              • OS: Windows 11
              Re: apparently i have a trojan
              « Reply #9 on: February 09, 2009, 03:35:22 PM »
              Go to Add or Remove Programs and uninstall:
              • RegClean
              • XoftSpySE
              .
              ----------

              Open HijackThis and select Do a system scan only.

              Place a check mark next to the following entries: (if there)

              .
              Important: Close all windows except for HijackThis and then click Fix checked.

              Exit HijackThis.

              ----------

              Download ComboFix© by sUBs from one of the below links. Be sure top save it to the Desktop.

              Link #1
              Link #2

              **Note:  It is important that it is saved directly to your Desktop

              Close any open Web browsers. (Firefox, Internet Explorer, etc) before starting ComboFix.

              Temporarily disable your antivirus, and any antispyware real time protection before performing a scan. Click this link to see a list of security programs that should be disabled and how to disable them.
               
              Double click combofix.exe & follow the prompts.
              When finished ComboFix will produce a log for you.
              Post the ComboFix log in your next reply.

              Important: Do not mouseclick ComboFix's window while it is running. That may cause it to stall.

              Remember to re-enable your antivirus and antispyware protection when ComboFix is complete.

              If you have problems with ComboFix usage, see How to use ComboFix

              squall_01



                Prodigy

                Thanked: 80
                Re: apparently i have a trojan
                « Reply #10 on: February 09, 2009, 03:48:24 PM »
                i thought this died glad to see resolvement
                Windows 7 RC Tester.  Working on it.  Your monitor says etchasketch on the side!

                If I fall who is there to pick me up now.  I stand alone but I stand as the gaurdian for whom I wish to protect.  The sound of my blade utters my name as you fall.  For I shall not move.  For those that forsake the very people are wosres

                JAJsangel

                  Topic Starter


                  Beginner
                  • Experience: Familiar
                  • OS: Windows 8
                  Re: apparently i have a trojan
                  « Reply #11 on: February 09, 2009, 09:16:49 PM »
                  heres the log

                  [attachment deleted by admin]

                  evilfantasy

                  • Malware Removal Specialist
                  • Moderator


                  • Genius
                  • Calm like a bomb
                  • Thanked: 493
                  • Experience: Experienced
                  • OS: Windows 11
                  Re: apparently i have a trojan
                  « Reply #12 on: February 09, 2009, 09:24:50 PM »
                  Delete these files/folders, as follows:

                  1. Go to Start > Run > type Notepad.exe and click OK to open Notepad.
                  It must be Notepad, not Wordpad.
                  2. Copy the text in the below code box by highlighting all the text and pressing Ctrl+C

                  Code: [Select]
                  KillAll::

                  Folder::
                  c:\program files\XoftSpySE

                  Registry::
                  [-HKEY_CLASSES_ROOT\clsid\{1872fae3-f2bc-40d7-a762-7bb9a72d24a4}]

                  [-HKEY_CLASSES_ROOT\clsid\{d86fa331-df95-46c8-8978-4c00d084c9a1}]

                  [-HKEY_CLASSES_ROOT\clsid\{1872fae3-f2bc-40d7-a762-7bb9a72d24a4}]

                  [-HKEY_CLASSES_ROOT\clsid\{1872fae3-f2bc-40d7-a762-7bb9a72d24a4}]

                  3. Go to the Notepad window and click Edit > Paste
                  4. Then click File > Save
                  5. Name the file CFScript.txt - Save the file to your Desktop
                  6. Then drag the CFScript (hold the left mouse button while dragging the file) and drop it (release the left mouse button) into ComboFix.exe as you see in the screenshot below. Important: Perform this instruction carefully!



                  ComboFix will begin to execute, just follow the prompts.
                  After reboot (in case it asks to reboot), it will produce a log for you.
                  Post that log (Combofix.txt) in your next reply.

                  Note: Do not mouseclick ComboFix's window while it is running. That may cause your system to freeze

                  evilfantasy

                  • Malware Removal Specialist
                  • Moderator


                  • Genius
                  • Calm like a bomb
                  • Thanked: 493
                  • Experience: Experienced
                  • OS: Windows 11
                  Re: apparently i have a trojan
                  « Reply #13 on: February 09, 2009, 09:25:11 PM »
                  Also let me know how the computer is running now.

                  squall_01



                    Prodigy

                    Thanked: 80
                    Re: apparently i have a trojan
                    « Reply #14 on: February 10, 2009, 10:49:19 AM »
                    hopefuly all is well then with it.
                    Windows 7 RC Tester.  Working on it.  Your monitor says etchasketch on the side!

                    If I fall who is there to pick me up now.  I stand alone but I stand as the gaurdian for whom I wish to protect.  The sound of my blade utters my name as you fall.  For I shall not move.  For those that forsake the very people are wosres