What do I do now?

The virus Trojandownloader.exe was found on my computer. I went through the basics that I found on these threads. I have my 4 logs and was just wondering what I do now. I have not done the toggle system restore because I did not know if I fixed everything. So if someone could just let me know what to do now that would be great.

 

This is continued from above...it is my MGtools Zip folder...

 

Hi AGD11,
Welcome to Major Geeks!

Please go to add/remove programs and uninstall:

Viewpoint Media Player

After that I would like for you to look into the following folder (do not open any files) and tell me what is inside:

C:\Documents and Settings\All Users\Application Data\zwdupehq

abri

 

I deleted the 'Viewpoint Media Player'. I tried looking for that file but I could not find it. I went to My Computer, then clicked on Local Hard Disk (C, then I clicked on Documents and Settings folder, then I clicked on the All Users folder, and I could not find the Application Data folder. All the folders that are there are the Desktop folder, the Favorites folder, the Shared Documents, the Start menu folder and a file that says NTUSER.DAT.

 

Hi ADG11,

Please do the following:

1) Now download The Avenger by Swandog46, and save it to your Desktop.

• Extract avenger.exe from the Zip file and save it to your desktop
• Run avenger.exe by double-clicking on it.
• Check the 'Input script manually' box.
• Click on the magnifying glass icon.
• Copy everything in the Quote box below, and paste it in the box that opens:

• Now click the 'Done' button.
• Click on the traffic light icon and OK the prompt.
• You will be prompted to restart, OK the prompt and your PC should reboot, if not, reboot it yourself.
• A log file from Avenger will be produced at C:\avenger.txt

2) Now run CCleaner at the default setting with the Windows tab as the top one.

3) Please run C:\MGtools\GetLogs.bat and attach the fresh MGlogs.zip it generates along with the Avenger log.


Let me know how things are running now?

abri

 

Things are running a lot better now! The virus pop-ups have stopped and my computer is running a lot faster. Here are the new logs from avenger and MGtools.

 

Hi ADG11,
I'm glad to hear that. There are a few small items left that we didn't do.

Please do the following:

1) Go to add/remove programs and uninstall the below:

- Java 2 Runtime Environment, SE v1.4.2_03

2) Reboot after uninstalling the above.

3) Install the current version of Sun Java from: Sun Java Runtime Environment

4) If you do not use Windows Messenger (not to be confused with MSN Messenger!!) I would like you to run Disable/Remove Windows Messenger

5) If you do not use any Norton programs, please run the following: Norton Removal Tool (SymNRT)

6) And now run C:\MGtools\analyse.exe by double clicking on it. This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

After you click fix, just close hijackthis.

7) Now run CCleaner at the default setting with the Windows tab as the top one.

After you've completed the above, see how your computer is running for awhile including rebooting a couple of times. If it is running well, you can go on with the final cleanup instructions in the box. If there are any other issues which come up, please report them before continuing on with the final instructions.

abri

 

Thank You so Much! I could never have done this by myself! Thank you for helping me! My computer is running so much better now. Again, thanks for all the help.

 

You're welcome!
Happy surfing!