MajorGeeks Support Forums

Go Back   MajorGeeks Support Forums > ----------= PC, Desktop and Laptop Support =---------- > Software
Register FAQ Members List Calendar Casino Mark Forums Read

Software Software such as operating systems like Windows XP, Windows Vista, Windows 7 etc., or specific programs.


Reply
 
Thread Tools Display Modes
  #1  
Old 09-16-05, 09:00
millhouse's Avatar
millhouse millhouse is offline
Private E-2
 
Join Date: Apr 2005
Location: Bradford PA
Posts: 1
Thanks: 0
Thanked 0 Times in 0 Posts
Default Account Profile

I have many users who have followed a link in their friends' AIM profiles resulting in a download and execution of a file that wipes all profile information clean.
For instance, the users' background image, screen saver, saved account information (such as outlook express email accounts and saved aim accounts) are gone. Most of these settings have simply reverted to the windows default (grassy hill background (bliss), Windows XP screen saver, outlook wants the user to setup an account as if it is being run for the first time; same with AIM).
Just wondeing if anybody out there has come across a simular problem or maybe has a fix.
The only lead I have is a file called msdirectx.sys in the system32 folder. This file was picked up by SAV when the link was initialy followed.
Thanks in advance,
Millhouse
__________________
Millhouse
ResNet Tech
Reply With Quote
Sponsored links
  #2  
Old 09-16-05, 19:49
Shadow_Puter_Dude's Avatar
Shadow_Puter_Dude Shadow_Puter_Dude is offline
MG Authorized Malware Fighter
 
Join Date: Apr 2005
Location: Northern NY
Posts: 8,845
Thanks: 1
Thanked 68 Times in 66 Posts
Default Re: Account Profile

msdirectx.sys is a rootkit driver.

Please follow the steps below:

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

POST BACK IN THE SPYWARE SPECIFIC FORUM
__________________
Kevin Zoll
Emsisoft Team - www.emsisoft.com


"Only those who fail greatly can ever achieve greatly" - Robert F. Kennedy
Microsoft Most Valuable Professional - Consumer Security (2007-2008)
Member - Alliance of Security Analysis Professionals - Since 2006
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 10:21.

MajorGeeks.Com Menu

MajorGeeks.Com \ All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ NEW! PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads

MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds


Powered by vBulletin® Version 3.8.4
Copyright © 2009 vBulletin Solutions, Inc. All rights reserved.
Ad Management by RedTyger