Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Spyware and trojans and scripts. OH MY!  (Read 4152 times)

0 Members and 1 Guest are viewing this topic.

Valdr

    Topic Starter


    Beginner
    • Yes
  • Computer: Specs
  • Experience: Experienced
  • OS: Windows XP
Spyware and trojans and scripts. OH MY!
« on: November 20, 2008, 01:32:39 PM »
My computer has started to slow down and Avira anti-virus has detected several scripts and trojans in the past few days. I have downloaded and run the programs promoted on this site and then I removed anything they came up with. I just wanted to post logs and have you guys check if I missed anything.



[Saving space - attachment deleted by admin]

CBMatt

  • Mod & Malware Specialist


  • Prodigy

  • Sad and lonely...and loving every minute of it.
  • Thanked: 167
    • Yes
  • Experience: Experienced
  • OS: Windows 7
Re: Spyware and trojans and scripts. OH MY!
« Reply #1 on: November 21, 2008, 08:00:23 PM »
All I see on your computer now is a downloader...

Open HijackThis and scan without saving a log.  Place a checkmark next to these entries...
O4 - HKLM\..\Run: [prunnet] "C:\WINDOWS\system32\prunnet.exe"
O4 - HKCU\..\Run: [prunnet] "C:\WINDOWS\system32\prunnet.exe"


Close all non-HijackThis windows (including this one) and click on Fix Checked.  Then reboot into Safe Mode and delete this file: C:\WINDOWS\system32\prunnet.exe

Once you've done that, post another HijackThis log so I can verify that it's gone.
Quote
An undefined problem has an infinite number of solutions.
—Robert A. Humphrey

Valdr

    Topic Starter


    Beginner
    • Yes
  • Computer: Specs
  • Experience: Experienced
  • OS: Windows XP
Re: Spyware and trojans and scripts. OH MY!
« Reply #2 on: November 22, 2008, 02:09:19 AM »
I ran Hijack this again and the item wasn't on the list. Here is the log from the scan.

[Saving space - attachment deleted by admin]

CBMatt

  • Mod & Malware Specialist


  • Prodigy

  • Sad and lonely...and loving every minute of it.
  • Thanked: 167
    • Yes
  • Experience: Experienced
  • OS: Windows 7
Re: Spyware and trojans and scripts. OH MY!
« Reply #3 on: November 23, 2008, 05:46:31 AM »
Did you run another MBAM scan after posting your HJT log?  It had detected the infection before, but no action was taken.  Did you by any chance re-scan and quarantine the files the second time around?  If not, you should try scanning again and then verify that the file is gone.
Quote
An undefined problem has an infinite number of solutions.
—Robert A. Humphrey

Valdr

    Topic Starter


    Beginner
    • Yes
  • Computer: Specs
  • Experience: Experienced
  • OS: Windows XP
Re: Spyware and trojans and scripts. OH MY!
« Reply #4 on: November 23, 2008, 10:04:00 AM »
I ran the anti-spyware tool after posting my HJT log and it found & removed the prunnet downloader.

CBMatt

  • Mod & Malware Specialist


  • Prodigy

  • Sad and lonely...and loving every minute of it.
  • Thanked: 167
    • Yes
  • Experience: Experienced
  • OS: Windows 7
Re: Spyware and trojans and scripts. OH MY!
« Reply #5 on: November 24, 2008, 04:27:18 AM »
Okay.  Well, in that case, it looks like you're clean now.  The scanners have thankfully done their job.
Quote
An undefined problem has an infinite number of solutions.
—Robert A. Humphrey