Downloader-EX and DOwnloader-IM

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by jackeduser, Aug 25, 2004.

  1. jackeduser

    jackeduser Private E-2

    I have winxp sp1, mcafee with latestupdates. scanned system and its finds tons of stuff...specifically downloader-ex and downloader-im. It detects and cleans them, but within seconds I am re-infected. I assume something is running that is re-installing this stuff on my system...the virus alerts from mcafee are almost as annoying as the viri themselves. I also notice my browser keeps changfing to windowws.cc

    This stuff is dringin me nuts and I don't get why mcafee appears to clean it yet it keeps re-installing...like I said instantly after its removed. PLEASE HELP!!!

    here is a recent hijack this log:

    Logfile of HijackThis v1.98.2
    Scan saved at 8:07:11 PM, on 8/25/2004
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
     
    Last edited by a moderator: Aug 26, 2004
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You need to follow guidelines! HijackThis is the last step and we have rules about how and when to post a log. Please do the below first. You have bunch of things wrong. But as a quick thing to try, use Task Manager to end this process "klcscy.exe". See if that slows down or stops the virus.

    Please follow all the steps in this Sticky thread < READ ME FIRST: Basic Spyware, Trojan And Virus Removal > If you already have any of the programs linked in the tutorial please double check your version to make sure you have the latest one and that you have any/all updates for the programs.

    NOTE: In order to resolve the issues you are having it is very important that you at least try to perform all the steps as outlined. If you have any difficulty please post back letting us know what steps you have completed, what you found while doing the scans if anything and details about any problems you have encountered in completing the steps. The more details you can provide the better.


    NOTE: You should read the tutorial in this Sticky thread < Hijack This Tutorial And How To Post Your Log File > Do not post a HijackThis log until we ask you to and when we do it must be text document attachment to your message.

    Update! Due to Hijack This logs destroying search engine and web site searches, we now ask you do not post your Hijack This log file unless requested by us. It is for advanced users, so if you do not understand how to use it, you do not need it....yet. Instead, please tell us in your post what symptoms you are experiencing so we can try and resolve it that way. When, and if, we ask you to post your log file, please attach it as a file. To do this save the log file and select manage attachments in a new thread to upload it. All running programs should be closed, including your web browser, e-mail, items in the tray, anything you can close... Close before running Hijack This!


    Do NOT run Hijack This from the Desktop, a temp folder or choose run from the download. Place it in its own folder, for example C:\Program Files\HJT
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds