Welcome to Tech Support Forum home to more then 136,000 problems solved. Issues have included: Spyware, Malware, Virus Issues, Windows, Microsoft, Linux, Networking, Security, Hardware, and Gaming Getting your problem solved is as easy as:
1. Registering for a free account
2. Asking your question
3. Receiving an answer

Registered members:
* Get free support
* Communicate privately with other members (PM).
* Removal of this message
* See fewer ads.
* And much more..

 





Want to know how to post a question? click here Having problems with spyware and pop-ups? First Steps
Go Back   Tech Support Forum > Security Center > HijackThis Log Help
User Name
Password
Site Map Register Donate Rules Blogs Mark Forums Read

HijackThis Log Help Get Rid Of Malware With Help From Our Analysts. Follow the "First Steps" link at the top right of each page before posting for help.

Reply
 
Thread Tools
Old 11-03-2006, 01:42 AM   #1 (permalink)
Registered User
 
Join Date: Nov 2005
Posts: 23
OS: Windows vista Home Premium x64 | XP Home | Fedora Linux


UDC6_0001_D19M1908NetInstaller.exe

Hi All,

Unfortuantely my laptop was infected over 1 week ago with this MSN virus infection floating around. I have tried a number of cleaners, but they do not permanently clean the problem.
Currently running or have run symantec, ad-aware SE, spybot, prevx1.

Prevx1 finds and jails C:\\WINXP\DOWNLOADED PROGRAM FILES\UDC6_0001_D19M1908NetInstaller.exe

problem is, once it has jailed the file (eg moved to safe area) a popup appears and after that prevx1 finds the same file again, so obviously I have not got to the root of the problem. When I run full system scans they come back clean.

I could provide HJT logs if required.

Thanks
Lebowski is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Reply With Quote
Old 11-03-2006, 02:17 AM   #2 (permalink)
aka mr.fraggs
 
Fr4665's Avatar
 
Join Date: Nov 2004
Location: USA or Germany
Posts: 2,959
OS: Win XP,Knoppix

My System

Send a message via AIM to Fr4665 Send a message via MSN to Fr4665 Send a message via Yahoo to Fr4665
what all is in that downloaded program files folder ? might be that thers a couple copies of it in there. check to see whats in there and it might be a good idea ot post a hjt log
__________________
I don't subscribe to threads please PM me if i miss a reply.
-------
Everest SensorView Pro DriverCleaner how to fix your game
Fr4665 is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Reply With Quote
Old 11-03-2006, 02:17 AM   #3 (permalink)
dai
Manager, Hardware Forums
 
Join Date: Jul 2004
Location: west australia
Posts: 39,513
OS: vista 32x ultimate retail


there are steps to take before posting a hijack log in the hijack forum
IMPORTANT - Read This Before Posting For Malware Removal Help
__________________
dai is online now  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Reply With Quote
Old 11-13-2006, 04:24 AM   #4 (permalink)
Registered User
 
Join Date: Nov 2005
Posts: 23
OS: Windows vista Home Premium x64 | XP Home | Fedora Linux


Hi dai, I have cheked the HJT log as you mentioned and have done what was required.

I have (it seems) managed to get rid of this UDC6_0001_D19M1908NetInstaller.exe from running, prevx1 has stopped complaining about it.

I do now have some serious issues with the amount of pops I'm getting, running spybot and ad-aware SE constantly finds things which I clean.

I'm currently getting a popup and also browser trying to download installdrivecleaner.exe now I know this is bad but not sure on the fix.

Thanks
Lebowski is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Reply With Quote
Old 11-13-2006, 08:31 AM   #5 (permalink)
dai
Manager, Hardware Forums
 
Join Date: Jul 2004
Location: west australia
Posts: 39,513
OS: vista 32x ultimate retail


only security can help with security problems so moving you over there
__________________
dai is online now  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Reply With Quote
Old 11-14-2006, 08:52 AM   #6 (permalink)
Analyst, Security Team
 
dorts's Avatar
 
Join Date: Mar 2006
Location: Singapore
Posts: 1,604
OS: Windows XP SP2

My System

Hi and Welcome to TSF.

Please do the following if you have not done so.

Click here to download HJTsetup.exe
  • Save HJTsetup.exe to your desktop.
  • Doubleclick on the HJTsetup.exe icon on your desktop.
  • By default it will install to C:\Program Files\Hijack This.
  • Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
  • Put a check by Create a desktop icon then click Next again.
  • Continue to follow the rest of the prompts from there.
  • At the final dialogue box click Finish and it will launch Hijack This.
  • Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
  • Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
  • Come back here to this thread and Paste the log in your next reply.
  • DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
__________________




If you think TSF have helped you, please kindly donate to TSF and help keep this site free to all.
dorts is offline  
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!Bookmark on Thread SoupReddit!
Reply With Quote
Reply


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off



All times are GMT -7. The time now is 02:35 PM.



Copyright 2001 - 2008, Tech Support Forum

Search Engine Friendly URLs by vBSEO

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81