Stubborn alcan worm [CLOSED]

Need a geek? Geeks to Go offers free, quality tech support -- in terms anyone can understand. Volunteers are waiting to help, friendly, technology experts who have knowledge to share, and enjoy helping others. Feel free to browse the site as a guest. However, you must log in to reply to existing topics, or to start a new topic. Other benefits of joining include richer forum features, and removal of all advertising. Learn more in our Welcome Guide Infected? Malware and Spyware Cleaning Guide. What are you waiting for? Click here to join for free today!

> Geeks to Go! » Geeks to Go Discussion » Recycle Bin » Lavasoft Support (Ad-aware)

Stubborn alcan worm [CLOSED], :ranting:

Options

don77 View Member Profile	Jun 26 2005, 11:49 AM Post #2
Malware Expert Posts: 18,682 From: Boston Ma. OS: XP Pro,ME, 98	Hi and welcome Gh+st2884, I need you to do a couple things please, First Please open notepad and save these instructions, Name it something you will remember Click Here to download Killbox by Option^Explicit. Extract the program to your desktop and double-click on its folder, then double-click on Killbox.exe to start the program. In the killbox program, select the Delete on Reboot option. Open the text file with these instructions in it, and copy the file names below to the clipboard by highlighting them and pressing Control-C: CODE C:\WINDOWS\system32\bszip.dll C:\WINDOWS\System32\cmd.com C:\WINDOWS\System32\netstat.com C:\WINDOWS\System32\ping.com C:\WINDOWS\System32\regedit.com C:\WINDOWS\System32\taskkill.com C:\WINDOWS\System32\tasklist.com C:\WINDOWS\System32\tracert.com C:\Archivos de programa\winupdates\winupdates.exe Return to Killbox, go to the File menu, and choose "Paste from Clipboard". Click the red-and-white "Delete File" button. Click "Yes" at the Delete on Reboot prompt. Click "No" at the Pending Operations prompt. Your computer should restart on its own, If it doesn't please restart it manually Next* Ad-aware has found objects on your computer If you chose to clean your computer from what Ad-aware found please follow these instructions below Please download Download CCleaner and install. Close out the program when it has completed set up (Don't run it yet we will use it later on) Open Ad-aware click on the Check for updates now Please make sure that you are using the * SE1R51 21.06.2005 * definition file. Please launch Ad-Aware SE and click on the gear to access the Configuration Menu. Please make sure that this setting is applied. Click on Tweak > Cleaning Engine > Uncheck "Always try to unload modules before deletion". Disconnect from the internet (for broadband/cable users, it is recommended that you disconnect the cable connection) and close all open browsers or other programs you have running. Please then boot into Safe Mode, Please see here if you need help on it Safe Mode To clean your machine, it is highly recommended that you clean the following directory contents (but not the directory folder): Please run CCleaner to assist in this process. (Setup: go to >options > settings > Uncheck "Only delete files in Windows Temp folders older than 48 hours" for cleaning malware files!) * C:\Windows\Temp\ * C:\Documents and Settings\<Your Profile>\Local Settings\Temporary Internet Files\ <- This will delete all your cached internet content including cookies. * C:\Documents and Settings\<Your Profile>\Local Settings\Temp\ * C:\Documents and Settings\<Any other users Profile>\Local Settings\Temporary Internet Files\ * C:\Documents and Settings\<Any other users Profile>\Local Settings\Temp\ * Empty your "Recycle Bin". Please run Ad-Aware SE from the command lines shown in the instructions shown below. Click "Start" > select "Run" > type the text shown in bold below (including the quotation marks and with the same spacing as shown) "C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe" /full +procnuke (For the Professional version) "C:\Program Files\Lavasoft\Ad-Aware SE Plus\Ad-Aware.exe" /full +procnuke (For the Plus version) "C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe" +procnuke (For the Personal version) Click OK. Please note that the path above is of the default installion location for Ad-aware SE, if this is different, please adjust it to the location that you have installed it to. When the scan has completed, select Next. In the Scanning Results window, select the "Scan Summary" tab. Check the box next to each "target family" you wish to remove. Click next, Click OK. If problems are caused by deleting a family, please leave it. Please shutdown/restart your computer after removal, run a new full scan and post the results as a reply. Do not launch any programs or connect to the internet at this time. Please then copy & paste the complete log file here. Don't quarantine or remove anything at this time, just post a complete logfile. This can sometimes takes 2-3 posts to get it all posted, once the "Summary of this scan" information is shown, you have posted all of your logfile. Please remember when posting another logfile keep "Search for negligible risk entries" deselected as negligible risk entries (MRU's) are not considered to be a threat. This option can be changed when choosing your scan type. Please post back here

Guest_Andy_veal_*	Jun 26 2005, 01:06 PM Post #3
	Please make sure that you select a full system scan instead of a smart mode, when following Don's instructions as well as posting on the forums

steveml View Member Profile	Jun 29 2005, 04:10 AM Post #5
New Member Posts: 9 OS: XP	Hi, edited for content. Cheers, Ste. This post has been edited by coachwife6: Jun 29 2005, 06:50 AM

don77 View Member Profile	Jun 30 2005, 07:38 PM Post #6
Malware Expert Posts: 18,682 From: Boston Ma. OS: XP Pro,ME, 98	Please run through the steps again First Please open notepad and save these instructions, Name it something you will remember Click Here to download Killbox by Option^Explicit. Extract the program to your desktop and double-click on its folder, then double-click on Killbox.exe to start the program. In the killbox program, select the Delete on Reboot option. Open the text file with these instructions in it, and copy the file names below to the clipboard by highlighting them and pressing Control-C: CODE C:\WINDOWS\system32\bszip.dll C:\WINDOWS\System32\cmd.com C:\WINDOWS\System32\netstat.com C:\WINDOWS\System32\ping.com C:\WINDOWS\System32\regedit.com C:\WINDOWS\System32\taskkill.com C:\WINDOWS\System32\tasklist.com C:\WINDOWS\System32\tracert.com C:\Archivos de programa\winupdates\winupdates.exe Return to Killbox, go to the File menu, and choose "Paste from Clipboard". Click the red-and-white "Delete File" button. Click "Yes" at the Delete on Reboot prompt. Click "No" at the Pending Operations prompt. Your computer should restart on its own, If it doesn't please restart it manually Next* Ad-aware has found objects on your computer If you chose to clean your computer from what Ad-aware found please follow these instructions below Please download Download CCleaner and install. Close out the program when it has completed set up (Don't run it yet we will use it later on) Open Ad-aware click on the Check for updates now Please make sure that you are using the * SE1R51 21.06.2005 * definition file. Please launch Ad-Aware SE and click on the gear to access the Configuration Menu. Please make sure that this setting is applied. Click on Tweak > Cleaning Engine > Uncheck "Always try to unload modules before deletion". Disconnect from the internet (for broadband/cable users, it is recommended that you disconnect the cable connection) and close all open browsers or other programs you have running. Please then boot into Safe Mode, Please see here if you need help on it Safe Mode To clean your machine, it is highly recommended that you clean the following directory contents (but not the directory folder): Please run CCleaner to assist in this process. (Setup: go to >options > settings > Uncheck "Only delete files in Windows Temp folders older than 48 hours" for cleaning malware files!) * C:\Windows\Temp\ * C:\Documents and Settings\<Your Profile>\Local Settings\Temporary Internet Files\ <- This will delete all your cached internet content including cookies. * C:\Documents and Settings\<Your Profile>\Local Settings\Temp\ * C:\Documents and Settings\<Any other users Profile>\Local Settings\Temporary Internet Files\ * C:\Documents and Settings\<Any other users Profile>\Local Settings\Temp\ * Empty your "Recycle Bin". Please run Ad-Aware SE from the command lines shown in the instructions shown below. Click "Start" > select "Run" > type the text shown in bold below (including the quotation marks and with the same spacing as shown) "C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe" /full +procnuke (For the Professional version) "C:\Program Files\Lavasoft\Ad-Aware SE Plus\Ad-Aware.exe" /full +procnuke (For the Plus version) "C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe" +procnuke (For the Personal version) Click OK. Please note that the path above is of the default installion location for Ad-aware SE, if this is different, please adjust it to the location that you have installed it to. When the scan has completed, select Next. In the Scanning Results window, select the "Scan Summary" tab. Check the box next to each "target family" you wish to remove. Click next, Click OK. If problems are caused by deleting a family, please leave it. Please shutdown/restart your computer after removal, run a new full scan and post the results as a reply. Do not launch any programs or connect to the internet at this time. Please then copy & paste the complete log file here. Don't quarantine or remove anything at this time, just post a complete logfile. This can sometimes takes 2-3 posts to get it all posted, once the "Summary of this scan" information is shown, you have posted all of your logfile. Please remember when posting another logfile keep "Search for negligible risk entries" deselected as negligible risk entries (MRU's) are not considered to be a threat. This option can be changed when choosing your scan type. Please post back here

don77 View Member Profile	Jul 5 2005, 05:54 PM Post #7
Malware Expert Posts: 18,682 From: Boston Ma. OS: XP Pro,ME, 98	Due to lack of feedback, this topic has been closed. If you need this topic reopened, please contact a staff member with address of this thread. This applies only to the original topic starter. Everyone else please begin a New Topic.

« Next Oldest · Lavasoft Support (Ad-aware) · Next Newest »

1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)

0 Members:

Topic Title	Replies / Views	Topic Information
Virus, Spyware and Trojan Removal Alcan Worm [CLOSED]	2 / 407	31st July 2008 - 10:39 PM Sheraz started - last by greyknight17
Virus, Spyware and Trojan Removal Alcan worm [CLOSED]	2 / 536	10th September 2008 - 03:54 PM biglev started - last by fenzodahl512
Virus, Spyware and Trojan Removal alcan worm [CLOSED]	3 / 381	23rd September 2008 - 03:00 PM wtam81 started - last by Rorschach112
Virus, Spyware and Trojan Removal Alcan worm [Closed]	11 / 1,130	14th January 2009 - 01:26 AM laughingperson5 started - last by fenzodahl512