Hello jirachiex,
Looks like we got the bulk of it. How is your computer behaving now?
Submit For Analysis
Please submit this file
C:\WINNT\system32\SBBD.exe to
http://deckard.be/submit/.
Update Java
We need to update your Java as it is out of date. Older versions can be a security risk as malware writers have been known exploit the weaknesses the code.
- Go to Start > Control Panel double-click on the Software icon > Add/Remove Programs.
- Search in the list for all previous installed versions of Java (Java 2 Runtime Environment SE and/or J2SE Runtime Environment) and Uninstall/Remove them.
- Download and install the newest version from Sun.
- After the reboot, go back into the Control Panel and double-click the Java icon.
Under Temporary Internet Files, click the Delete Files button.
- There are three options in the window to clear the cache - Leave ALL three checked:
- Downloaded Applets
- Downloaded Applications
- Other Files
Click OK on Delete Temporary Files Window. NOTE: This deletes ALL of the Downloaded Applications and Applets from the CACHE.
- Click OK to leave the Java Control Panel.
Deletions
Delete the following Files indicated in
RED if they still exist:
C:\WINNT\Justin.exe
C:\WINNT\Setup90.exe
Online Scan
Perform an online scan using Internet Explorer with
Kaspersky WebScanner. Click on
Launch Kaspersky Anti-Virus Web Scanner. You will be prompted to install an ActiveX component from Kaspersky, Click
Yes.
- The program will launch and then begin downloading the latest definition files.
- Once the files have been downloaded, click on NEXT.
- Now click on Scan Settings
- In the scan settings make that the following are selected:
- Scan using the following Anti-Virus database: extended
- Scan Options: Scan Archives and Scan Mail Bases
- Click OK
- Turn off the real time scanner of any existing antivirus program before performing the online scan. You can turn it back on after the scan is done.
- Now under select a target to scan, select My Computer
- The program will start and scan your system.
- The scan will take a while so be patient and let it run all the way.
- Once the scan is complete it will display if your system has been infected.
- Click on the Save as Text button and save the file to your desktop.
- Copy and paste that information in your next post.
Take note the names and locations of any file it detects but fails to clean.
With Your Next Post...
Please paste the following with your next reply (in this order please):
- Kaspersky Scan report,
- a new HiJackThis log taken after Kaspersky finishes.