trojans removed but damage remains

Discussion in 'Malware Help (A Specialist Will Reply)' started by reuven, May 30, 2005.

  1. reuven

    reuven Private E-2

    win98se. pentium4. hd 80 giga.
    I noticed on MSreader, where I have books from two sources, that all the English was replaced by Hebrew characters but not forming real words.But if I used the read facility ,the correct English text was read.This was only on one set of books,the second set was normal.
    Going to word processor "Accent Express" I found the menues instead of being in English were replaced by different characters.
    I then did a deep scan using "Trojan Remover" (always on starting computer this program does a short scan)and found two trojans which were dealt with.
    On checking Microsoft Reader I found it was now normal.
    But "accent Express" was still incorrect.I uninstalled this program but on trying to reinstall from original cd i get message "not sufficient memory or disk space"
    The trojan in some way affected the computer.
    I would be grateful for any help.
    Reuven
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Did you actually check how much memory and disk space were free at the time you tried the install?

    Please follow the steps below:

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

    After doing ALL of the above you still have a problem:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
  3. reuven

    reuven Private E-2

    Yes I have carried all the mandatory steps.except Symantec security check
    would not load.
    The computer is in the same state as before .I have tried to set up other
    programs ,other than "accent express" without any trouble.
    Two other problems-if I go to command C:\scanreg/fix it does not complete
    but freezes .
    The second problem is with the 3.5 floppy drive, I get notice "the system
    cannot read from this drive"
    I also have noticed I am receiving and sending a great many bytes when I
    am not connected to the internet.I get updates to my anti-virus program but
    only with notification.
    reuven
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    There are no real malware problems showing in your HJT log.

    Did you uninstall Spybot? One of its files is missing as indicated below. You may want to uninstall and then reinstall the new version 1.4 that just came out.
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL (file missing)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds