Go Back   Hardware Canucks > SOFTWARE > O/S's, Drivers & General Software

       
Reply
 
LinkBack Thread Tools Display Modes
  #31 (permalink)  
Old August 16, 2009, 12:55 PM
sswilson's Avatar
Moderator
F@H
 
Join Date: Dec 2006
Location: Moncton NB
Posts: 13,215

My System Specs

Default

So how many days did it take to finally get the nastys out of there??? Sorry, but my solution if a standard AV or AS doesn't get rid of it is to reformat. Takes 4 hours max to get me back to normal state vice 5 days and tons of work to find a way to exorcise the demons in your computer.
__________________
EVGA X58 3X SLI / i7 980X / 3X 4G Mushkin Blackline Frostbite / XFX Pro 1000W / EVGA GTX 680 SC+ 2GB / Corsair F120 / WD 6401AALS / TT Lvl 10 GT
Swiftech MCP655 WC Pump / EK XT 240 Rad / 2X Scythe Ultra Kaze / EK Supreme HF / Primochill Myriad Dual Bay Res / Dell UltraSharp U2412M

Sabertooth 990FX / PhII X4 965 / 2X4G Corsair XMS3 / EVGA GTX580 + EK Block / Corsair 120G Force GT
Corsair TX750 / XSPC EX240 / Swiftech MCP655-B / XSPC Dual Bay Res / ? CPU block / Bitfenix Ghost / Samsung 931BF
Reply With Quote
  #32 (permalink)  
Old August 16, 2009, 03:27 PM
somecanadianguy's Avatar
Hall Of Fame
F@H
 
Join Date: Mar 2009
Location: somecanadiancity
Posts: 1,118

My System Specs

Default

She's running Avast right now.
Here's what it says so far...

File C:WINDOWS\TEMP\u.exe is infected by Win32:AutoIt-FR [Trj]

Got a bunch of options, and she deleted the file.
Scan is about 50% done now.

I can't find any real info on Win32:AutoIt-FR.
Some are saying it's a false positive.
Reply With Quote
  #33 (permalink)  
Old August 16, 2009, 03:29 PM
Nodscene's Avatar
Allstar
 
Join Date: Dec 2007
Location: Toronto
Posts: 818
Default

Don't forget to use ATF Cleaner or CCleaner to empty out the temp files. You may also have to go in the temp directory and manually clean some stuff out.

As for Hijackthis, it's almost useless nowadays. I used to use it religiously but it's failed to find things more than it's finding them now.
__________________

Create something idiot proof and they will make a better idiot.
_____________________________________

Intel Q6600 - Gigabyte EP35-DS4 - OCZ Reaper 4gig PC2-6400 - XFX 8800GT 512Mb Alpha Dog - AuzenTech X-Fi Prelude - Alesis M1Active MK2 - Corsair HX-620 - Silverstone Temjin TJ05B-X - Scythe Katana 2 - WD Raptor 150Gb - Seagate 7200.11 750Gb x2 - Samsung SH-S203N
Reply With Quote
  #34 (permalink)  
Old August 16, 2009, 05:24 PM
somecanadianguy's Avatar
Hall Of Fame
F@H
 
Join Date: Mar 2009
Location: somecanadiancity
Posts: 1,118

My System Specs

Default

Any ideas about the startup items that I can't see names of?
Msconfig shows two of them in HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run (something like that... I can't get on to see right now).
The names are invisible though.
Reply With Quote
  #35 (permalink)  
Old August 17, 2009, 04:49 AM
Nodscene's Avatar
Allstar
 
Join Date: Dec 2007
Location: Toronto
Posts: 818
Default

Well, you can try Hijackthis and post your log here so we can see what it picks up.
__________________

Create something idiot proof and they will make a better idiot.
_____________________________________

Intel Q6600 - Gigabyte EP35-DS4 - OCZ Reaper 4gig PC2-6400 - XFX 8800GT 512Mb Alpha Dog - AuzenTech X-Fi Prelude - Alesis M1Active MK2 - Corsair HX-620 - Silverstone Temjin TJ05B-X - Scythe Katana 2 - WD Raptor 150Gb - Seagate 7200.11 750Gb x2 - Samsung SH-S203N
Reply With Quote
  #36 (permalink)  
Old August 17, 2009, 09:43 AM
Shadowmeph's Avatar
Hall Of Fame
F@H
 
Join Date: Oct 2007
Posts: 2,792

My System Specs

Default

the thing about most programs that you have to pay for after you install them is that some of them actually install the virus I did a test on an old computer that I had different virus scanners on it and just ran one at a time while the others where turned off and not running in the back ground . after running all the virus scanners my system came up totally clean, then I downlo0aded online advertised virus,ma ware scanners and ran them and every one of them ( I tested one at a time then cleaned my system) everyone of them actually put the malware or virus on my system so don't go for the "download for free" crap . there are allot of good "free" removers out there that are trully free and not those scams that say free until you run it and find out that free acutally mean free to download but not free to clean your system.
__________________

Folder :
ASUS KGPE-D16 Dual Socket G34, 8x2GB kingston1333MHz DDR3, 2x 6i28 CPUs 2x NH-U9DO A3
Reply With Quote
Reply


Thread Tools
Display Modes