View Single Post
Old 02-16-2007, 01:10 AM   #11 (permalink)
Sempurna
Analyst, Security Team
 
Sempurna's Avatar
 
Join Date: Sep 2006
Posts: 1,302
OS: Windows XP SP2


Hi ct456568,

You’re most welcome ct456568. Glad to be of some help.

Hmm, the Morpheus folders are still present in your system. Please try Killbox again and see if they regenerate after you nuke them. If they come back, then we’ll have to use more powerful file deletion utilities.

Please run Killbox and nuke these folders:

C:\Program Files\Morpheus
C:\Program Files\MorpheusBar



NEXT:

Please go to: VirusTotal
  • At the top of the page you'll find a "Browse" button. Click the "Browse" button and browse to next file:

    C:\WINDOWS\ipuninst.exe

  • Click "Open".
  • Then click the "Send" button at the top of the VirusTotal page.
  • This will scan the file. Please be patient.
  • Once scanned, copy and paste the results in your next reply together with a new HijackThis log.


Then please do the same as above for the following files:

C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP FLAC Codec.dat
C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Music Converter.dat
C:\WINDOWS\Audio Converter Uninstaller.exe
C:\WINDOWS\system32\asba.sys
C:\WINDOWS\system32\utcs.sys
C:\WINDOWS\EReg072.dat


NEXT:

Please reboot your computer normally into Windows, and then please post the reports from VirusTotal and a new HijackThis log.

How are things running now? Please let me know about any problems that persist.
__________________

Keep this forum alive - if you've been helped at this forum, please do consider a donation. Thank you for your support.

Donation link for Tech Support Forum
Sempurna is offline