Hiya
Sorry about the lateness in replies, these forums are very busy. I'll close the other two threads in a minute, as its best to have only one thread per problem :)
Can you post the log that superantispyware found the trojan.
Also, can you run these so we can see what else there may be there:
Download Security Check from here.
----
Download OTL to your Desktop
eddie
Sorry about the lateness in replies, these forums are very busy. I'll close the other two threads in a minute, as its best to have only one thread per problem :)
Can you post the log that superantispyware found the trojan.
Also, can you run these so we can see what else there may be there:
Download Security Check from here.
- Save it to your Desktop.
- Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
- A Notepad document should open automatically called checkup.txt; please post the contents of that document.
----
Download OTL to your Desktop
- Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
- When the window appears, underneath Output at the top change it to Standard Output.
- Select
All Users
LOP Check
Purity Check - Under the Standard Registry box change it to All
- Please copy the text in the code box below and paste it in the Custom Scans/Fixes box in OTL:
Code:netsvcs
activex
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%windir%\Installer\*.*
%windir%\system32\tasks\*.*
%windir%\system32\tasks\*.* /64
%systemroot%\Fonts\*.exe
%systemroot%\*. /mp /s
/md5start
consrv.dll
explorer.exe
winlogon.exe
regedit.exe
Userinit.exe
svchost.exe
services.exe
user32.dll
ATAPI.SYS
/md5stop
C:\Windows\assembly\tmp\U\*.* /s
%Temp%\smtmp\* \s
%Temp%\smtmp\1\*.*
%Temp%\smtmp\2\*.*
%Temp%\smtmp\3\*.*
%Temp%\smtmp\4\*.*
dir "%systemdrive%\*" /S /A:L /C
CREATERESTOREPOINT
- Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
A black box will appear, this is part of the custom scan, so don't be alarmed ;)
IF OTL SAYS 'NOT RESPONDING' DON'T USE THE MOUSE. IT WILL CARRY ON SCANNING AFTER A FEW MINUTES
- When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
- Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time and post them in your topic
eddie