[SOLVED] unknown virus

donk · 06-19-2009, 02:13 PM

I have been working on getting rid of several virus' on a computer that belongs to a friend of mine at work. I am sending along a zip file of a scan done by HighJack this. We have used ccleaner ncleaner AVG full version Windows live safty scan and for the most part seem to have gotten rid of most all the virus' to speak of. A scan was done this morning using Windows Safty Scan and came up with four said problems, I am not sure of the names being I did not do the scan. Non the less perhaps you can look over the scan log that I am going to send along with this thread. Thanks for any help you may provide.
Donk

donk · 06-19-2009, 05:05 PM

I have added a few more virus' and trojans files to the list I provided earlier in the thread. I had scanned using windows live Onecare safty scanner. hope this helps abit. I am now doing a scan using Avast virus cleaner. I will post the results.

Ried · 06-19-2009, 07:36 PM

Hello donk,

HijackThis is no longer the preferred initial scanning tool in this forum. With today's malware, more comprehensive set of logs is required to determine the presence of malware.

Please follow our pre-posting process outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help

After running through all the steps, you shall have a proper set of logs. Please post them in your next reply.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

donk · 06-20-2009, 12:21 PM

Thanks Ried, I will not be able to do the scan until tomorrw in the am. I will post the results as soon as the scan is complete, and thanks again for your support

Ried · 06-20-2009, 12:25 PM

That will be fine. I'll remain subscribed.

donk · 06-21-2009, 10:53 AM

Ried,
Not able to get hold of my friend this morning so I am going to send info from my computer which is also infected with a virus. I am running a scan now. If and when Mike gets with me I will post, should be some time this morning or tomorrow morning, please check back, thanks for your patients.

donk · 06-21-2009, 11:00 AM

I have sent the results from my computer, Hope this will tell you just what the deal is, again thanks

donk · 06-21-2009, 11:17 AM

I have sent along my system info using belarc.
Thanks,

donk · 06-21-2009, 11:19 AM

Let me know if I did not do the two each scans as per, I will do them again.
Donk

donk · 06-21-2009, 12:24 PM

These are to reports that I am sending concerning the computer I was doing a scan on which was the computer that belonged to my friend. I had started the scan when all of a sudden it crashed. I am hoping you will be able to determine what possibly caused this with the reports that I have sent. This is the computer that had the virus problem to which I started the thread. Thanks again
Donk

donk · 06-21-2009, 06:30 PM

is it possible that the scan tools may have caused his computer to crash?

Ried · 06-21-2009, 08:01 PM

Please do not post scans or reports from anything other than what I have asked for - you have me quite confused at this point.

Tell me about the crash. What tool were you running at the time?

Where is the dds.txt and attach.txt?

Is Post #7 for your system? If so, we'll have to deal with that in another thread as it's too difficult to analyze 2 different systems at one time, in one thread.

donk · 06-21-2009, 09:59 PM

My bad, I did not here from my friend so I decided to put mine down being it to had a scan going and was also infected. Anyway, I was in the middle of the scan when it dumpted on me. I was using attach.txt at the time. I am going to give it a go again and see if it happens again. I will surly keep it simple. before we go any further, let me know if you are up to par as to what is going on at this point in time. I am now working on my friends computer, and that is the only computer that we will be working on on this thread. concider mine gone.

Ried · 06-22-2009, 12:52 AM

I don't mind looking at your system as well, I just need for you to begin a new thread for your system. We can work them both, but in different threads. Begin a new thread post the dds.txt (copy/paste contents directly into the reply box) attach the ark.txt and attach.txt. PM me with the link to that new thread.

Quote:

Anyway, I was in the middle of the scan when it dumpted on me.

Which one - the gmer scan? Did you configure it exactly as instructed in the pre-posting topic I linked you to earlier?

donk · 06-22-2009, 01:04 AM

Thanks, I will do that. I was in the middle of the (gmer), I had already run the dds scan and saved to desk top

donk · 06-22-2009, 01:13 AM

I was not able to uncheck the four items indicated only two. I will get back with you on the other two that I was not able to find on the right hand side of the colume.
Donk

donk · 06-22-2009, 09:25 AM

All's good I found what you where talking about on the checks

Ried · 06-22-2009, 09:58 AM

Do you have the reports to post? I can't do anything to help without those.

donk · 06-22-2009, 10:34 AM

Well that sounds all and good except everytime I go to use GMER on my computer or my friends computer they crash. I was doing the scan this morning on mine and BLAAAAM!!!!!, The damned thing dumpted on me, (crashed). Not sure I want to keep messing around with the new and improved scan program. So Ya, I have made several attempts to get the results up to you. Now as soon as I can do the scan with out the computer crashing I will be more then happy to send you my results

Ried · 06-22-2009, 12:05 PM

When you run gmer, also uncheck 'Devices'

If it continues to crash, then skip that scan and at least send me the dds.txt and attach.txt

06-19-2009, 07:36 PM	#3 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,860 OS: WinXP and Vista	Re: unknown virus Hello donk, HijackThis is no longer the preferred initial scanning tool in this forum. With today's malware, more comprehensive set of logs is required to determine the presence of malware. Please follow our pre-posting process outlined here: NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help After running through all the steps, you shall have a proper set of logs. Please post them in your next reply. If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

06-20-2009, 12:21 PM	#4 (permalink)
donk Registered User Join Date: Apr 2007 Posts: 261 OS: xp	Re: unknown virus Thanks Ried, I will not be able to do the scan until tomorrw in the am. I will post the results as soon as the scan is complete, and thanks again for your support

06-20-2009, 12:25 PM	#5 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,860 OS: WinXP and Vista	Re: unknown virus That will be fine. I'll remain subscribed. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

06-21-2009, 10:53 AM	#6 (permalink)
donk Registered User Join Date: Apr 2007 Posts: 261 OS: xp	Re: unknown virus Ried, Not able to get hold of my friend this morning so I am going to send info from my computer which is also infected with a virus. I am running a scan now. If and when Mike gets with me I will post, should be some time this morning or tomorrow morning, please check back, thanks for your patients.

06-21-2009, 11:19 AM	#9 (permalink)
donk Registered User Join Date: Apr 2007 Posts: 261 OS: xp	Re: unknown virus Let me know if I did not do the two each scans as per, I will do them again. Donk

06-21-2009, 06:30 PM	#11 (permalink)
donk Registered User Join Date: Apr 2007 Posts: 261 OS: xp	Re: unknown virus is it possible that the scan tools may have caused his computer to crash?

06-21-2009, 08:01 PM	#12 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,860 OS: WinXP and Vista	Re: unknown virus Please do not post scans or reports from anything other than what I have asked for - you have me quite confused at this point. Tell me about the crash. What tool were you running at the time? Where is the dds.txt and attach.txt? Is Post #7 for your system? If so, we'll have to deal with that in another thread as it's too difficult to analyze 2 different systems at one time, in one thread. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

06-21-2009, 09:59 PM	#13 (permalink)
donk Registered User Join Date: Apr 2007 Posts: 261 OS: xp	Re: unknown virus My bad, I did not here from my friend so I decided to put mine down being it to had a scan going and was also infected. Anyway, I was in the middle of the scan when it dumpted on me. I was using attach.txt at the time. I am going to give it a go again and see if it happens again. I will surly keep it simple. before we go any further, let me know if you are up to par as to what is going on at this point in time. I am now working on my friends computer, and that is the only computer that we will be working on on this thread. concider mine gone.

06-22-2009, 01:04 AM	#15 (permalink)
donk Registered User Join Date: Apr 2007 Posts: 261 OS: xp	Re: unknown virus Thanks, I will do that. I was in the middle of the (gmer), I had already run the dds scan and saved to desk top

06-22-2009, 01:13 AM	#16 (permalink)
donk Registered User Join Date: Apr 2007 Posts: 261 OS: xp	Re: unknown virus I was not able to uncheck the four items indicated only two. I will get back with you on the other two that I was not able to find on the right hand side of the colume. Donk

06-22-2009, 09:25 AM	#17 (permalink)
donk Registered User Join Date: Apr 2007 Posts: 261 OS: xp	Re: unknown virus All's good I found what you where talking about on the checks

06-22-2009, 09:58 AM	#18 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,860 OS: WinXP and Vista	Re: unknown virus Do you have the reports to post? I can't do anything to help without those. __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."

06-22-2009, 10:34 AM	#19 (permalink)
donk Registered User Join Date: Apr 2007 Posts: 261 OS: xp	Re: unknown virus Well that sounds all and good except everytime I go to use GMER on my computer or my friends computer they crash. I was doing the scan this morning on mine and BLAAAAM!!!!!, The damned thing dumpted on me, (crashed). Not sure I want to keep messing around with the new and improved scan program. So Ya, I have made several attempts to get the results up to you. Now as soon as I can do the scan with out the computer crashing I will be more then happy to send you my results

06-22-2009, 12:05 PM	#20 (permalink)
Ried Assistant Manager, TSF Academy; Moderator/Analyst Security Team Join Date: Jan 2005 Location: Ohio Posts: 26,860 OS: WinXP and Vista	Re: unknown virus When you run gmer, also uncheck 'Devices' If it continues to crash, then skip that scan and at least send me the dds.txt and attach.txt __________________ Member of ASAP since 2005 Member of UNITE since 2006 "It is one life whether we spend it laughing or weeping." "Take the time to laugh--it is the music of the soul."