Win32: tratBHO(trj) avast found it

Viruses and worms
21

I don’t know either folder. Do I need to run another DSS or find my latest log (I could hardly find my sanity).

22

Ok, we’ll have a look at those folders.

Open a new notepad and copy and paste the following into it

[b]@echo off
dir “C:\Documents and Settings\All Users\Application Data\n7-89-o9-3r-4t-r9” > look2.txt

dir “C:\Program Files\GameHouse” >> look2.txt

dir “C:\Documents and Settings\Will\Application Data\GameHouse” >>> look2.txt
start look2.txt[/b]

Click file, save as. Set save it to desktop, name it look.bat, and set the file type as all files click ok You should have a file on your desktop with the icon shown at the bottom of this post.

Double click it, a note pad will appear, save it to your desktop so you can attach it to your next reply.

23

Got the lines copied and pasted, file saved to desktop and named look bat but when I double click it notepad opens for a second with a black screen. When I right click and then open it does the same thing.

24

All right don’t worry about the .bat file. Actually delete it.

In windows explorer, navigate to the above mentioned folders. Click on the folder in the left hand panel. Have a look in the right hand panel, but don’t click on anything in the right hand panel. Tell me what you see. These all may be related to some games you have.

Yes, 1 more new DSS log please.

25

Ok deleted away .bat file. Looked through folders and those are not needed as they are old. I’ve attached the DSS log.
Things are running fine with no slow downs and redirects but I do have explorer.exe and iexplorer.exe running 40k and 58k right now, is that typical.
I have been advised to run Mozilla and not Explorer because it’s not a buggy.

Thank You

26

It looks good.
re: Explorer and iexplorer
Most likely.

re: folders

If they are games or programs that you don’t want in those folders, make sure you uninstall them via add/remove programs before you delete them.

Now the time you have been waiting for. Clean up time.

  • Click start button, run, then copy and paste the following line into the run box and click ok.

ComboFix /u

  • Open OTMOVEIT2 then click the Clean Up button. You may get prompted by your firewall that OTMoveIt wants to contact the internet - allow this. A cleanup.txt will be downloaded, a message dialog will ask you if you want to proceed with the cleanup process, click Yes. This will delete all the tools you have downloaded plus itself.

  • Create a new restore point

You must be logged on to an administrator account
Go to Start - All Programs - Accessories - System Tools - System Restore.
Click Create a restore point, and then click Next.
In the text box labeled Restore Point Description, type a name for this restore point , click create

  • Remove old restore points
  • Go to Start - All Programs - Accessories - system tools. Launch the Disk Cleanup tool and let it run. When it finishes a box with tabs will appear, select the more options tab. On this tab you will find a section for System Restore. If you press the Clean Up button for that section, Windows will delete all restore points except for the most recent one.

*Go to http://java.sun.com/javase/downloads/index.jsp

Scroll down to “Java Runtime Environment (JRE) 6 Update 6…allows end-users to run Java applications”.
Click the download button on the right.

If Information Bar pop-ups up, right-click on it and say it’s OK to display the blocked content.

Select the platform (Windows, in your case), mutli language.
Accept the license agreement, click continue.

You do not have to install the Java Web Start ActiveX Control

Scroll down and click on Windows Offline Installation,
Save the file jre-6u6-windows-i586-p.exe to your desktop;
Do not select Run . Do not install it yet.

When the download is complete, close your browser.

Open Control Panel > Add/Remove Programs:

Uninstall the old versions of Sun Java, Java JRE, or similar.
Do not uninstall Java TM 6 Update 6 if found!

Close Add/Remove Programs.

In Windows Explorer, navigate to C:\Program Files[b]Java[/b] <=this folder, if found. Delete any subfolders it may contain.

Do NOT delete jre1.6.0_06 if found!
Do NOT delete C:\Program Files[b]JavaVM[/b] <=this folder, if found!

Reboot your computer.

Double-click on the saved file to install the update.
Delete the downloaded installation file after completing the above procedure and reboot if not prompted to do so.

Adobe Reader

“Adobe reccommends all users update to Adobe Reader 8.1.2”, available here:
http://www.adobe.com/go/getreader
The google tool bar is optional, uncheck it if you don’t want it.

  • Download and run this clean up utility. You can use it regularly. When it’s first run, it is in demo mode to show you what it will remove. Review it and then rerun in real mode. It is configurable.

CleanUp by Steven Gould

http://www.stevengould.org/downloads/cleanup/

  • If you are using windows firewall, please note that it doesn’t provide outbound protection. A third party firewall will.

A discussion on free firewalls can be found here.

http://forum.avast.com/index.php?topic=30808.0

or

http://forum.avast.com/index.php?topic=33530.0

You can also delete any log,text that where created during this.

27

Did everything you asked me to and everything is running GREAT! I’ll keep reading more about the firewalls on the forums.

Thank You “oldman” for all your assistance and true patience.
Will

28

Glad to help. Get your self fitted with a good firewall.

There is a lot of valuable info on this forum.

Take care and keep safe.