Tech Support Forum - View Single Post - Trojan found - xlibgfl254.dll infected by Generic Downloader.bt

Sempurna · 02-10-2007, 12:52 AM

Hi megan,

Hmm, nothing suspicious about the Kaspersky log. It just picked up your DIGStream app and flagged it as malware.

Can you give me some details about what McAfee is picking up? A filepath would be helpful.

In the meantime, let’s pick up some leftovers.

Please run HijackThis and click "Scan". Place a check (tick) next to the following entries (if present):

R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)

Close ALL programs and browsers (including this one), leaving ONLY HijackThis open, then click "Fix checked".

Then please exit HijackThis.

NEXT:

Please download ComboFix by sUBs:

Save it to your desktop.
Double-click combofix.exe and follow the prompts.
When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.

CAUTION : Do not mouse-click ComboFix's window while it is running. That may cause it to stall.

NEXT:

Please reboot your computer normally into Windows, and then please post the ComboFix log and a new HijackThis log.

How are things running now?

02-10-2007, 12:52 AM	#6 (permalink)
Sempurna Analyst, Security Team Join Date: Sep 2006 Posts: 1,302 OS: Windows XP SP2	Hi megan, Hmm, nothing suspicious about the Kaspersky log. It just picked up your DIGStream app and flagged it as malware. Can you give me some details about what McAfee is picking up? A filepath would be helpful. In the meantime, let’s pick up some leftovers. Please run HijackThis and click "Scan". Place a check (tick) next to the following entries (if present): R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file) Close ALL programs and browsers (including this one), leaving ONLY HijackThis open, then click "Fix checked". Then please exit HijackThis. NEXT: Please download ComboFix by sUBs: Save it to your desktop. Double-click combofix.exe and follow the prompts. When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply. CAUTION : Do not mouse-click ComboFix's window while it is running. That may cause it to stall. NEXT: Please reboot your computer normally into Windows, and then please post the ComboFix log and a new HijackThis log. How are things running now? __________________ Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support. Donation link for Tech Support Forum