Tech Support Forum - View Single Post - Antivirus pop up message-W32/Dzan.a attack

**LonnyRJones** · 12-03-2007, 02:53 AM

Welcome to the forum

Start Hijackthis Scan and place a check next to these items If there.
O21 - SSODL: incestuously - {03413bf7-e34c-445b-bfc0-a2b127255871} - (no file)
O22 - SharedTaskScheduler: {03413bf7-e34c-445b-bfc0-a2b127255871} - incestuously - (no file)

Optional fix's
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll
====================================
Hit fix checked and close Hijackthis.

Post a combofix log
1. Download this file - combofix.exe to your desktop
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
alternate link
http://www.techsupportforum.com/sect...s/ComboFix.exe
2. Run the program in this fashion, go start run and copy paste in
"%userprofile%\desktop\combofix.exe" /KillAll
Hit ok or press enter
3. When finished, it shall produce a log for you. Post that log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall.
If you already have combofix re-download please as it is updated often.

Why do you have three antivirus programs installed ?

12-03-2007, 02:53 AM	#5 (permalink)
LonnyRJones Expert Analyst, Moderator, Security Team Join Date: Sep 2006 Posts: 1,646 OS: xp	Re: Antivirus pop up message-W32/Dzan.a attack Welcome to the forum Start Hijackthis Scan and place a check next to these items If there. O21 - SSODL: incestuously - {03413bf7-e34c-445b-bfc0-a2b127255871} - (no file) O22 - SharedTaskScheduler: {03413bf7-e34c-445b-bfc0-a2b127255871} - incestuously - (no file) Optional fix's O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\Toolbar\ctbr.dll ==================================== Hit fix checked and close Hijackthis. Post a combofix log 1. Download this file - combofix.exe to your desktop http://download.bleepingcomputer.com/sUBs/ComboFix.exe alternate link http://www.techsupportforum.com/sect...s/ComboFix.exe 2. Run the program in this fashion, go start run and copy paste in "%userprofile%\desktop\combofix.exe" /KillAll Hit ok or press enter 3. When finished, it shall produce a log for you. Post that log in your next reply Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall. If you already have combofix re-download please as it is updated often. Why do you have three antivirus programs installed ? __________________ Our help is voluntary. But this site needs donations to operate.