Tech Support banner

Status
Not open for further replies.
1 - 4 of 4 Posts

·
Registered
Joined
·
60 Posts
Discussion Starter · #1 ·
block-checker was downloaded onto my computer and now puts messages into all messenger convorsations

it shows up in hjt can remove it but them comes back

adaware se, spybot, ms anti spyware none can find it and all are latest versions

i can find the program but not delete it because it is running

have checked ms config its there but if i uncheck it it just rechecks straight away

i am guessing there is another program running that keeps pulling it back up but how can i find this? to my eyes the program isnt showing up in hjt

help! :dead:
 

·
Registered
Joined
·
5,955 Posts
Hello!

Please empty any Quarantine folder in your antivirus program and purge all recovery items in the Spybot program (if you use it) before running this tool.

Download the Mwav virus checker at http://www.mwti.net/antivirus/mwav.asp (Use Link 3)

1. Save it to a folder.
2. Reboot into Safe Mode.
3. Double click the Mwav.exe file. This is a stand alone tool and NOT just a virus checker......so it won't install anything.
4. Select all local drives, scan all files, and press SCAN. When it is completed, anything found will be displayed in the lower pane.
5. In the Virus Log Information Pane......
Left click and highlight all the information in the Lower pane --- Use &CTRL C &on your keyboard to copy everything found in the lower pane and save it to a notepad file
*Note* If prompted that a virus was found and you need to purchase the product to remove the malware, just close out the prompt and let it continue scanning. We are not going to use this to remove anything...but to ID the bad files.

Once you copy that to a Notepad file...highlight the text and copy it here.

Please download HijackThis http://www.greyknight17.com/spy/HijackThis.exe - this program will help us determine if there are any spyware/malware on your computer. Create a folder at C:\HJT and move HijackThis.exe there. Double click on the program to run it.

1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Post the hijackthis.log file here. Do not fix anything in HijackThis since they may be harmless.
 

·
Registered
Joined
·
60 Posts
Discussion Starter · #3 ·
like i said i used hijack this but it always comes back
i cured it myself anyway
i ended the proccess in task manager then again in hijack this and then deleted the file that kept running
thanks for the help anyway tho
 

·
TSF Security Team, Emeritus
Joined
·
26,363 Posts
There are a lot of entries left.. You should clear them

Please download Atribune's Blockrem from HERE
  • Unzip it to its own folder on your desktop.
  • Boot your computer to safe mode by rebooting and tapping the F8 button repeatedly until it brings up a boot menu.
    From that menu, select Safe Mode by using the arrow keys to highlight it then pressing enter.
  • Once in safe mode open the Blockrem folder on your desktop and double-click blockrem.bat (this is the file with the gear icon) to run it.
  • Once it is running please follow the onscreen instructions.
  • Reboot in normal mode and post a new HijackThis log.
 
1 - 4 of 4 Posts
Status
Not open for further replies.
Top