system
June 28, 2004, 4:46am
1
I think a trojan just really messed up my computer.
Earlier today i noticed that whenever i would start up my computer, an error message would pop up telling me a certain object couldn’t be found. I found the object in a quarantine list in adaware, and, thinking adaware just made a mistake by taking it off my computer, reinstalled it. (I know, I’m an idiot.) When I reinstalled this thing, McAfee and avast! went crazy telling me it was a trojan, so i deleted the thing, and a second later the computer crashed. Now, my computer keeps on crashing and I can’t run programs from disks at all. The trojan isn’t in the avast! log file. What do I do now? ???
system
June 28, 2004, 6:55am
2
McAfee and avast! went crazy
I can’t run programs from disks at all.
The trojan isn’t in the avast! log file. What do I do now? ???
Hi,
@1 ) I hope you DON’T have avast’s Shield & McAfee’s AV-Monitor running simultaneously ??
@2 ) Please run the CLEANER from avast’s homepage
@3 ) do you find it in one of the various REPORT pages of avast or in it’s chest ??
The above actions might be working better in SafeMode (press F8-when booting).http://forum.avast.com/index.php?board=4;action=display;threadid=5373
if possible, post a hijackthis-Log
system
June 28, 2004, 7:44pm
3
Okay. I was running both McAfee and avast! at the same time. I didn’t know that was bad. What kind of problems does that create? I also rand the CLEANER and it found nothing.
How do I get to the “REPORT” pages of avast? I can only find the CHEST and I don’t think it’s in there. There are three files in there, but they are from further back in time. I can’t find them in McAfee either. I think one of them was “bridge.dll”?
Here is the HJT log:
Logfile of HijackThis v1.97.7
Running processes:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway http://www.dell4me.com/myway http://www.dell4me.com/myway http://www.dell4me.com/myway Real.com (HKLM)http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst0401.cab http://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB http://128.252.163.240/activex/AxisCamControl.cab http://www.stopzilla.com/_download/Auto_Installer/dwnldr.cab
Thanks.
system
June 28, 2004, 8:06pm
4
Oh. I found the logfile for avast. These were in there from longer ago:
Win32:Trojano-169[Trj] in C:\System Volume Information_restore{B37680B2-BA0A-4E5D-BF30-83E444C88624}\RP28\A001823.dll
Win32:Trojano-169[Trj] in C:\System Volume Information_restore{B37680B2-BA0A-4E5D-BF30-83E444C88624}\RP28\A001822.exe
Win32:Trojan-gen. {VC} in C:\windows\alchem.exe
Win32:Trojan-gen. {Other} in C:\windows\twaintec.dll
The page you wrote on the other post said not to delete these types of things when they show up? I think I deleted them. :-\
system
June 29, 2004, 3:04am
5
Hello-
DavidR
June 30, 2004, 12:48pm
6
Twaintec.dll - trogan - http://www.pchell.com/support/twaintec.shtml
Alchem.exe - Adware.ClickAlchemyhttp://sarc.com/avcenter/venc/data/pf/adware.clickalchemy.html
Learn to use google search, if there is something that you need to check is legit or otherwise, check it out.
system
June 30, 2004, 1:25pm
7
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
the above are bad, too, and should be checked & fixed in hijackthis
