Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

[Referred]Request AdawareSE log file review


  • Please log in to reply

#16
Guest_Andy_veal_*

Guest_Andy_veal_*
  • Guest
Are you still having problems?
  • 0

Advertisements


#17
tyro2

tyro2

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts
I downloaded Trojan Hunter and ran a full scan as suggested however it did not find the VBS_STARTPAGE.N like was found by Trendmicro. Is there any way to use the Trendmicro?
  • 0

#18
tyro2

tyro2

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts
I just ran active scan from pandasoftware and seems to have the same virus(?) that trendmicro found but then renamed it(?): VBS/Inor.AF. One instance was C:\ntdetect.hta and another was C:\documents and settings\all users\start menu\programs\startup\microsoft windows.hta. It sent a message that it could not remove it but has apparently renamed it because now at boot up I receive a message from windows that it cannot open the file Microsoft Windows_hta.vir where I previously got a warning from my AV that there was malicious script. Please tell me what I need to do now.
  • 0

#19
Guest_Andy_veal_*

Guest_Andy_veal_*
  • Guest
Please follow the instructions located in Step Five: Posting a Hijack This Log. Post your HJT log as a reply to this thread, which has been relocated to the Malware Removal Forum for providing you with further assistance.

Kindly note that it is very busy in the Malware Removal Forum, so there may be a delay in receiving a reply. Please also note that HJT logfiles are reviewed on a first come/first served basis.
  • 0

#20
tyro2

tyro2

    Member

  • Topic Starter
  • Member
  • PipPip
  • 14 posts
Thanks again for all of your help. I hoping that the problem is now cured. As I mentioned earlier when I ran the Panda Activescan it said that it couldn't delete the .hta files that it found but it did rename them. I subsequently deleted the renamed files myself (ntdetect_hta.vir was ntdetect.hta and Microsoft Windows_hta.vir was Microsoft Window.hta). I then rebooted and my AV no longer reports a Malicous Script when I bootup. Everything seems to be normal so far. Would you recommend further testing?
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP