[Referred]Request AdawareSE log file review
Started by
tyro2
, Apr 27 2005 09:23 AM
#16
Guest_Andy_veal_*
Posted 05 May 2005 - 11:06 AM
Guest_Andy_veal_*
Guest_Andy_veal_*
-
- Guest
#17
Posted 08 May 2005 - 08:42 PM
tyro2
- Topic Starter
-
- Member
-
- 27 posts
Member
I downloaded Trojan Hunter and ran a full scan as suggested however it did not find the VBS_STARTPAGE.N like was found by Trendmicro. Is there any way to use the Trendmicro?
#18
Posted 09 May 2005 - 10:05 AM
tyro2
- Topic Starter
-
- Member
-
- 27 posts
Member
I just ran active scan from pandasoftware and seems to have the same virus(?) that trendmicro found but then renamed it(?): VBS/Inor.AF. One instance was C:\ntdetect.hta and another was C:\documents and settings\all users\start menu\programs\startup\microsoft windows.hta. It sent a message that it could not remove it but has apparently renamed it because now at boot up I receive a message from windows that it cannot open the file Microsoft Windows_hta.vir where I previously got a warning from my AV that there was malicious script. Please tell me what I need to do now.
#19
Guest_Andy_veal_*
Posted 09 May 2005 - 01:00 PM
Guest_Andy_veal_*
Guest_Andy_veal_*
-
- Guest
Please follow the instructions located in Step Five: Posting a Hijack This Log. Post your HJT log as a reply to this thread, which has been relocated to the Malware Removal Forum for providing you with further assistance.
Kindly note that it is very busy in the Malware Removal Forum, so there may be a delay in receiving a reply. Please also note that HJT logfiles are reviewed on a first come/first served basis.
Kindly note that it is very busy in the Malware Removal Forum, so there may be a delay in receiving a reply. Please also note that HJT logfiles are reviewed on a first come/first served basis.
#20
Posted 10 May 2005 - 08:52 PM
tyro2
- Topic Starter
-
- Member
-
- 27 posts
Member
Thanks again for all of your help. I hoping that the problem is now cured. As I mentioned earlier when I ran the Panda Activescan it said that it couldn't delete the .hta files that it found but it did rename them. I subsequently deleted the renamed files myself (ntdetect_hta.vir was ntdetect.hta and Microsoft Windows_hta.vir was Microsoft Window.hta). I then rebooted and my AV no longer reports a Malicous Script when I bootup. Everything seems to be normal so far. Would you recommend further testing?
Similar Topics
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users
As Featured On:
Sign In
Create Account
