Cant remove packed.win32.tdss.f!a2
valcard Computer behavier
restarted computer one day and now when it runs in normal mode it restarts on its own about 5 mins when desktop shows. Have trouble once in awhile in safe mode were it will restart. Since the problem started i was only able to get it to start in safe mode with networking twice, it usauly freezes up when loading the drivers when i try this mode.
Things I tried
Once in safe mode i ran avg (found nothing), a-square (found packed.win32.tdss.f!a2); and avast (found trojan horse virus about 4). Avg errored out for some reason and wont aloud reinstall in safe mode. Avast only removerd the trojan horse virus not the packed file. A-square finds the file but when trying to delete or quartine I get a timer saying to save all info before restart. Reminded me of blaster worm virus so I downloaded blastfix.exe and it found nothing.
Info on Packed.win32.tdss.f!a2
it finds about 3 or 4 marked as high risk
Thankyou in advance for your help.
Back to Top
Touch Forum Moderator Hello valcard
Let´s se what´s running on your computer ->
Once installed, run CCleaner click the Windows tab
Reboot
Please download Malwarebytes' Anti-Malware:
Or here:
to your desktop .
Double-click mbam-setup.exe and follow the prompts to install the program.
At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch
Malwarebytes' Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Please connect all your external hard drive/flash drive before running Malwarebyte
Once the program has loaded, select Perform full scan , then click Scan.
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is checked, and click Remove Selected .
When completed, a log will open in Notepad. Please save it to a convenient location.
NB : If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.
to download HJTinstall.exe
Save HJTinstall.exe to your desktop.
By default it will install to C:\Program Files\Trend Micro\Hijack This.
Click I accept
Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log.
Click Save to save the log file and then the log will open in notepad.
Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
Come back here to this thread and Paste the log in your next reply.
DO NOT have Hijack This fix anything yet.
Most of what it finds will be harmless or even required.
Post hijackthis log along with Malwarebytes' Anti-Malware log
Do NOT post your problem in someone elses thread.
A non-profit, volunteer network.
Back to Top
valcard Ran ccleaner as directed, but cant install mban setup on normal or safe mode. Doulbe click to install and nothing happens, it shows in task manager that its open under processes. Any ideas on what to do next will be appreciated. Sorry about not getting back sooner, hard to work on computer whin long days at work and a 7 month old son that goes to bed late somedays. Back to Top
Touch Forum Moderator No problem
Please download combofix here -> http://download.bleepingcomputer.com/sUBs/ComboFix.exe 123 .exe to stop malware from disabling it.DO NOT click on the Combofix window or attempt to use your computer as this can cause the scanning process to stall.
Do NOT post your problem in someone elses thread.
A non-profit, volunteer network.
Back to Top
valcard combo fix log0 9"0 0" Back to Top
valcard Forgot ot add computer is running in normal mode for about a hour and hasn't restarted yet. Thank you for all your help. Back to Top
Touch Forum Moderator That´s good news, and I assume you have restarted.
Uninstall (the outdated) version of hijackthis.
Then ->
Save HJTinstall.exe to your desktop. Double click on the HJTinstall.exe icon on your desktop. By default it will install to C:\Program Files\Trend Micro\Hijack This. Click I accept Click on the Do a system scan and save a log file button. It will scan and then ask you to save the log. Click Save to save the log file and then the log will open in notepad. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log. Come back here to this thread and Paste the log in your next reply . DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
Do NOT post your problem in someone elses thread.
A non-profit, volunteer network.
Back to Top
valcard computer has been runnung all night and hasn't restart yet (at least i know of) Back to Top
Touch Forum Moderator
Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any): O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll (file missing)
Reboot. And you´re done. How are things running ?
Do NOT post your problem in someone elses thread.
A non-profit, volunteer network.
Back to Top
valcard Computer hasn't restarted at all yet and has been running since my last post. Fix any item that shows as missing file in hijackthis right? If yes I have fixed them all,was about four. Going to post last hijackthis log just to make sure thier is nothing eles. One question I have is what programs are going to have for virus scans and any suguestions on what to use to help provent problems. Thank you for all your help. Back to Top
Touch Forum Moderator Have hijackthis to fix:
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
And you´re done.
Now your computer problems are solved, it is time for the clean-up procedure
You should Create a New Restore Point to prevent possible reinfection from an old one.The easiest and safest way to do this is :
Go to Start > All Programs > Accessories > System Tools > System Restore Create a restore point , and Ok it. cleanmgr More options tab
Please download http://download.bleepingcomputer.com/oldtimer/OTCleanIt.exe When asked if you want to proceed with the cleanup process, click Yes. Restart your computer when prompted.
Do NOT post your problem in someone elses thread.
A non-profit, volunteer network.
Back to Top
Forum Information Currently it is Friday, July 30, 2010 1:57 PM (GMT +2)View Active Threads Who's Online This forum has 31950 registered members. Please welcome our newest member, Willow .Details tanisstray 5 Latest Threads
|