Need Help Immediatly Please!

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by xxchristianxx, Nov 22, 2004.

  1. xxchristianxx

    xxchristianxx Private E-2

    Well I was infected by Trojan Horses and Backdoors i need to remove the folders infected but cant.. i ran Hijack This and heres the log

    [log removed]
    I need some help to get rid of the Trojans my AIM is xxchristian2k4xx
    I cant even log onto MSN or Yahoo anymore only AIM please help :(
     
    Last edited by a moderator: Nov 22, 2004
  2. Kodo

    Kodo SNATCHSQUATCH

    Please follow all the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal


    If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs.

    NOTE: In order to resolve the issues you are having it is very important that you at least try to perform all the steps as outlined. If you have any difficulty please post back letting us know what steps you have completed, what you found while doing the scans if anything and details about any problems you have encountered in completing the steps. The more details you can provide the better.
     
  3. xxchristianxx

    xxchristianxx Private E-2

    Well I can barley do anything because a ActiveX Error Pops up
     
  4. xxchristianxx

    xxchristianxx Private E-2

    ok now.... im really frustrated because of this and i ran TrojanHunter and found ALOT of TROJAN INFECTED FILES can anyone help on to remove them? I have a log of the infected files
     
  5. Kodo

    Kodo SNATCHSQUATCH

    download this program and run it in safe mode. it requires a free activation and you can use any browser to register it at their site.

    a-squared (a²) Personal Edition 1.1

    you may even want to look into replacing your current anti-virus with this and scanning your machine. Again, it's free with a free registration.

    Avast! Home Edition 4.5.523

    Once you can clean those trojans off (if you can with the above) then try to follow the tutorial. If not then we'll have to look at your log. Your log must be attached as a text document. You MUST run HiJackThis from some folder like C:\HJT or C:\program files\HJT NOT from a temp file or desktop or any folder under documents and settings like mydocuments.

    Hijack This Tutorial And How To Post Your Log File
     
  6. xxchristianxx

    xxchristianxx Private E-2

    ok well i did it and it removed all off the files but i still have folders that says "make sure disk is not full or write-protected and the file is not currently in use"
     
  7. xxchristianxx

    xxchristianxx Private E-2

    They are Read Only files for some reason.. and wont change back and i cant open Yahoo Messnenger and my MSN messenger password was changed lol i got messed up lol
     
  8. Kodo

    Kodo SNATCHSQUATCH

    are you able to open IE up with active x errors?
     
  9. xxchristianxx

    xxchristianxx Private E-2

    there are no activex errors yet
     
  10. xxchristianxx

    xxchristianxx Private E-2

    ok lol cancel that out.. there are still some errors
     
  11. Kodo

    Kodo SNATCHSQUATCH

    attach your log.. sounds like there is some manual labor that we have to do.
     
  12. xxchristianxx

    xxchristianxx Private E-2

    there isnt much but here it is
     

    Attached Files:

    • hjt.txt
      File size:
      2.3 KB
      Views:
      2
    Last edited by a moderator: Nov 22, 2004
  13. Kodo

    Kodo SNATCHSQUATCH

    was that from safe mode or from normal mode?
     
  14. xxchristianxx

    xxchristianxx Private E-2

    normal... should it be safe?
     
  15. Kodo

    Kodo SNATCHSQUATCH

    no, it just looked really short..

    I don't see anything in the log. can you describe the errors that you are getting. Exact messages are helpful. Screen shots would be ideal.
     
  16. xxchristianxx

    xxchristianxx Private E-2

    Ok heres a screenshot and when i try to open Yahoo messenger it doesnt open.. just shows hour glass for a second and then goes away..

    http://img46.exs.cx/img46/5213/ScreenShot66.jpg (sorry couldnt upload attachment.. too big of a file)
     
  17. Kodo

    Kodo SNATCHSQUATCH

    that's a security setting in IE.

    Tools >>Options>>Security>>Internet
    select default level.

    Try again.
     
  18. xxchristianxx

    xxchristianxx Private E-2

  19. Kodo

    Kodo SNATCHSQUATCH

    disable active desktop in your desktop settings (right click on desktop, choose properties)
     
  20. xxchristianxx

    xxchristianxx Private E-2

    hmmm cant seem to find it :eek:
     
  21. xxchristianxx

    xxchristianxx Private E-2

    Should I try and Re-Format now that the Trojans are gone (A-Squared cleaned them supposably) because last time i re-formatted the folders were still there and everything
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds