Hi Roomba,
Somehow I missed your reply. I apologize for that. You've got some trojans that are just sitting around, so let's deal with them. Please set Ewido to quarantine and scan again as it will remove most of these.
Reconfigure Ewido
Please reconfigure Ewido to the following settings:
- Open Ewido by double-clicking the Ewido system tray icon.
- Click the Scanner tab at the top and then the Settings sub-tab:
- Under How to act?, click Recommended actions and select Quarantine.
- Under Reports, select Automatically generate report after every scan
- Run a scan with Ewido.
Unhide Files
Go to
My Computer > Tools > Folder Options > View tab and
select "Show hidden files and folders".
Uncheck the "Hide protected operating system files (Recommended)" option. Also make sure there is no checkmark beside "Hide file extensions for known file types". Click OK.
Uninstall
Click
Start > Control Panel > Add / Remove Programs and uninstall the following programs (if they exist):
WhenU (any entry)
Please let me know if any of these were unable to uninstall.
Deletions
Delete the following Files indicated in
RED and Folders indicated in
BLUE if they still exist.
D:\Program Files\Common Files\WhenU
D:\WINDOWS\SYSTEM\exclean.exe
Clear Cookies
Clear your IE cookies. Start>Settings>Control Panel>Internet Options>General. Under
Temporary Internet Files, click on
Delete Cookies. Then click
Delete Files.
Online Scan
Please perform an
BitDefender Online Scan using Internet Explorer. Once finished, click on the
Details button to view the results. To the upper right of the results you will see an option saying "
Click here to export the scan results", please do so and save them to your desktop. Post the log of the scan results.
Generate An Uninstall List- Open HijackThis.
- Click on the "Configure" button on the bottom right.
- Click on the tab "Misc Tools".
- Click on the Box that says "Open Uninstall Manager".
- Click on the button "Save list"
Please save a copy and paste the contents with your next reply.
With Your Next Post...
Please paste the following with your next reply (in this order please):
- Ewido scan report,
- BitDefender scan report,
- Your uninstall list,
- a new HiJackThis log taken after BitDefender finishes.