[fenzodahl512]

Yup.. do this when you sleep or don't use the computer as will take quite a while...


Please download JavaRa to your desktop and unzip it to its own folder. <<MIRROR>>

• Run JavaRa.exe, pick the language of your choice and click Select. Then click Remove Older Versions.
• Accept any prompts.

Then, please download and install the latest Java from HERE


---------------------------


Please run the Kaspersky Online Scanner

In Microsoft Windows Vista, you must open the Web browser using the Run as Administrator command. From the Desktop right click the icon to open the browser and choose Run as Administrator.

• Click on SCAN NOW
• Click Accept.
• The program will then begin downloading the latest definition files.
• Once the files have been downloaded locate the Scan Settings and have it scan My Computer.
• The scan will take a while, so be patient and let it finish.

When the scan is done, in the Scan is complete window, any infection is displayed.
There is no option to clean/disinfect, however, we need to analyze the information on the report.

To obtain the report:
Click on: Save Report As

• Next, in the Save as prompt, Save in area, select: Desktop.
• In the File name area use KScan, or something similar.
• In Save as type: click the drop arrow and select: Text file [*.txt]
• Then, click: Save

Copy and paste the Kaspersky Online Scanner Report in your next reply.

Note for Internet Explorer 7 users: If at any time you have trouble viewing the accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75%. Once the license is accepted, reset to 100%.

[Advertisements]

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7 REPORT
Tuesday, December 2, 2008
Operating System: Microsoft Windows Vista Home Premium Edition, 32-bit (build 6000)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Tuesday, December 02, 2008 02:36:19
Records in database: 1430824
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
C:\
D:\

Scan statistics:
Files scanned: 159418
Threat name: 7
Infected objects: 9
Suspicious objects: 0
Duration of the scan: 02:57:09


File name / Threat name / Threats count
C:\Qoobox\Quarantine\C\Users\Tim\AppData\Local\Temp\qchpqhvm.dll.vir Infected: Trojan.Win32.Monder.aant 1
C:\Users\Tim\.housecall6.6\Quarantine\asappsrv.dll.bac_a01284 Infected: not-a-virus:AdWare.Win32.CommAd.a 1
C:\Users\Tim\.housecall6.6\Quarantine\ceb3CMU4.exe.bac_a01284 Infected: Trojan-Downloader.Win32.Small.buy 1
C:\Users\Tim\.housecall6.6\Quarantine\command.exe.bac_a01284 Infected: not-a-virus:AdWare.Win32.CommAd.a 1
C:\Users\Tim\.housecall6.6\Quarantine\EXNL47i.exe.bac_a01284 Infected: Trojan-Downloader.Win32.Agent.afzg 1
C:\Users\Tim\.housecall6.6\Quarantine\FES9U13.exe.bac_a01284 Infected: not-a-virus:AdWare.Win32.WebHancer.f 1
C:\Users\Tim\.housecall6.6\Quarantine\FES9U13.exe.bac_a01284 Infected: not-a-virus:AdWare.Win32.WebHancer.390 1
C:\Users\Tim\Documents\Incomplete\Preview-T-5745425-smells like cheese.mp3 Infected: Trojan-Downloader.WMA.GetCodec.c 1
C:\Users\Tim\Documents\Incomplete\T-5745425-smells like cheese.mp3 Infected: Trojan-Downloader.WMA.GetCodec.c 1

The selected area was scanned.

[PoRT55]

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7 REPORT
Tuesday, December 2, 2008
Operating System: Microsoft Windows Vista Home Premium Edition, 32-bit (build 6000)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Tuesday, December 02, 2008 02:36:19
Records in database: 1430824
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
C:\
D:\

Scan statistics:
Files scanned: 159418
Threat name: 7
Infected objects: 9
Suspicious objects: 0
Duration of the scan: 02:57:09


File name / Threat name / Threats count
C:\Qoobox\Quarantine\C\Users\Tim\AppData\Local\Temp\qchpqhvm.dll.vir Infected: Trojan.Win32.Monder.aant 1
C:\Users\Tim\.housecall6.6\Quarantine\asappsrv.dll.bac_a01284 Infected: not-a-virus:AdWare.Win32.CommAd.a 1
C:\Users\Tim\.housecall6.6\Quarantine\ceb3CMU4.exe.bac_a01284 Infected: Trojan-Downloader.Win32.Small.buy 1
C:\Users\Tim\.housecall6.6\Quarantine\command.exe.bac_a01284 Infected: not-a-virus:AdWare.Win32.CommAd.a 1
C:\Users\Tim\.housecall6.6\Quarantine\EXNL47i.exe.bac_a01284 Infected: Trojan-Downloader.Win32.Agent.afzg 1
C:\Users\Tim\.housecall6.6\Quarantine\FES9U13.exe.bac_a01284 Infected: not-a-virus:AdWare.Win32.WebHancer.f 1
C:\Users\Tim\.housecall6.6\Quarantine\FES9U13.exe.bac_a01284 Infected: not-a-virus:AdWare.Win32.WebHancer.390 1
C:\Users\Tim\Documents\Incomplete\Preview-T-5745425-smells like cheese.mp3 Infected: Trojan-Downloader.WMA.GetCodec.c 1
C:\Users\Tim\Documents\Incomplete\T-5745425-smells like cheese.mp3 Infected: Trojan-Downloader.WMA.GetCodec.c 1

The selected area was scanned.

[fenzodahl512]

Go to these folders and delete everything inside them.. Don't delete the folder itself.. Just leave them empty... How is your computer now?

C:\Users\Tim\.housecall6.6\Quarantine
C:\Users\Tim\Documents\Incomplete

[PoRT55]

the computer seems to be working great now. i want to thank you. does your donation accept pay pal? thanks again

[fenzodahl512]

the computer seems to be working great now. i want to thank you. does your donation accept pay pal? thanks again

Yup.. There's "Donate" button at my siggy.. click it


Looks good to me.. Lets do some cleanup...



Time for some housekeeping

• Click START then RUN
• Now type Combofix /u in the runbox and click OK
  Please note that the space between combofix and /u is needed
  
  

Please read these excellent articles by miekiemoes :
Help! My computer is slow!
How to prevent Malware

And another excellent article by CastleCops Malware Prevention: Prevent Re-infection

Please reply to this thread once more and tell us about the computer behaviour before we can close this thread



Have a safe and happy computing day!


Regards
fenzodahl512

[PoRT55]

said combofix is uninstalled??

[fenzodahl512]

said combofix is uninstalled??

Yup.. That's right.. Any more question?

[fenzodahl512]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.