i have reason to beleive i have some trojans and malware and am very worried. avast keeps telling me that it has blocked malware and trojans here are the specs
location c:\windows\installer.…\80000064.@
infection win32:zaccess-pb [trj]
action moved to chest
process c:\windows\system32\services.exe
this is a trojan and there is another with same specs eccept location the last 2 numbers arent 64 they are 32
not an official malware but until the troops show up
run
run ccleaner
Malware bytes anti malware install then update before running
let it remove anything it finds
post any results
run
i have ran malware bytes avast scans and advanced system protector and got rid of all the things i havent got the results because i did all these scans yester day and i scaned like 5 times each with all the programs. i also seem to be missing windows fire wall and windows defender i had these programs before the viruses appeared so i belive there could be a root kit i cant update windows either
you can run adwcleaner
here are some flagrantly coppied instructions
can you find the mbam log, if so post it along with the adwcleaner log
run AdwCleaner;
Click on the [Delete] Wait for the programme completes his work.
The program will close all active programs. Click OK to confirm that.
On the next two windows that open ( Informations and Restart required ) click OK
The computer will restart and open a notepad ( C:\AdwCleaner[S1].txt ) with the report.
Save the notepad report on the Desktop
Please attach here C:\AdwCleaner[S1].txt
if your really think you have a rootkit there are Sophus and MBAM rootkit
but get rid of the noise first
here is the delete result also trojans are still poping up the same ones
Try Hitman Pro Trial Version:
http://www.surfright.nl/en/hitmanpro
This program may be run from a flash drive if needed.
superantispyware be sure and update before scanning- if it starts without updating stop and update
http://www.sophos.com/en-us/products/free-tools/sophos-anti-rootkit.aspx
post the logs
should lower the noise
do not run combofix or others without without a helper
seems to have fixed it but im still not sure cause i cant update windows fire wall missing and defender is too
that log still shows lots of crap did you let the program repair?
did you notice how windows defender and firewall were bypassed?
run scan only- see the instruction about
“Make sure that the option Remove found threats is unticked and the Scan Archives option is ticked.”
ESET Online Scanner instructions shamelessly copied from jeffce
you can also run Super Anti Spyware and Sophus
Go here to run an online scannner from ESET.
http://go.eset.com/us/online-scanner
Windows Vista/Windows 7 users will need to right click on their Internet Explorer shortcut, and select Run as Administrator
Note: For browsers other than Internet Explorer, you will be prompted to download and install esetsmartinstaller_enu.exe. Click on the link and save the file to a convenient location. Double click on it to install and a new window will open. Follow the prompts.
Turn off the real time scanner of any existing antivirus program while performing the online scan
Tick the box next to YES, I accept the Terms of Use.
Click Start
When asked, allow the activex control to install
Click Start
Make sure that the option Remove found threats is unticked and the Scan Archives option is ticked.
Click on Advanced Settings, ensure the options Scan for potentially unwanted applications, Scan for potentially unsafe applications, and Enable Anti-Stealth Technology are ticked.
Click Scan
Wait for the scan to finish
When the scan is done, if it shows a screen that says "Threats found!", then click "List of found threats", and then click "Export to text file..."
Save that text file on your desktop.
Copy and paste the contents of that log as a reply to this topic.
Close the ESET online scan, and let me know how things are now.
Hi I would not recommend hitmanpro for this infection, there are probably several broken services on the system now
Download OTL to your Desktop
Secondary link
[*]Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
https://dl.dropbox.com/u/73555776/OTL_Main_Tutorial.gif
[*]Select All Users
[*]Under the Custom Scan box paste this in
netsvcs
BASESERVICES
%SYSTEMDRIVE%*.exe
/md5start
services.*
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
dir “%systemdrive%*” /S /A:L /C
CREATERESTOREPOINT
[*]Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
[*]Post both logs
Do what esssexboy says- he’s the pro
I chose hitman pro as it looked like others may have been de-activated and it’s new and might have been missed= hard to tell without the mbam log
tks
wyrmrider