Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

I can't remove a Trojan Gen. 2 [Solved]


  • This topic is locked This topic is locked

#46
WhiteHat

WhiteHat

    Trusted Helper

  • Retired Staff
  • 1,925 posts
  • Go to here
  • Click the download button under Kaspersky Security Scan
  • Download and run the file
  • It will start to download the Kaspersky Security Scan program data
  • Once downloaded the installer will begin
  • Click Next
  • Accept the License Agreement
  • Click Install
  • The program will now install
  • Click Finish
  • Kaspersky Security Scan will now start

    Posted Image
  • Click the Full Scan button

    Posted Image
  • The scan will take about an hour or two depending on the amount of data on your hard drive
  • If the scan detects problems it will open a Problems found window
  • Click Details to generate a scan results report

    Posted Image
  • Once the scan is complete do the following:
    • For XP: Navigate to C:\Documents and Settings\All Users\Application Data\Kaspersky Lab\KSS2\DataRoot
      For Vista/7: Navigate to C:\ProgramData\Kaspersky Lab\KSS2\DataRoot
    • Right-click on the HtmlReport folder --> Click Send to --> Click Compressed (zipped) folder
    • Attach the HtmlReport zipped folder to your next post
      Posted Image
      Posted Image
      Posted Image
  • You can now close Kaspersky Security Scan

  • 0

Advertisements


#47
hile

hile

    Member

  • Topic Starter
  • Member
  • PipPip
  • 38 posts
Here comes

Attached Files


  • 0

#48
WhiteHat

WhiteHat

    Trusted Helper

  • Retired Staff
  • 1,925 posts
Hi,

Your antivirus still warning you? If yes, the warnings are always on C:\Users\Hilkka\AppData\Local\Temp\****.tmp

Please go to: VirusTotal
Posted Image
  • Click the Choose File button and search for the following file (one by one):

    C:\Program Files\CyberLink\Power2Go\cbs.dll

  • Click Open > Scan It!.
  • Please be patient while the file is scanned.
  • Copy and past the Link (URL) with the results.

  • 0

#49
hile

hile

    Member

  • Topic Starter
  • Member
  • PipPip
  • 38 posts
https://www.virustot...sis/1356950755/
  • 0

#50
hile

hile

    Member

  • Topic Starter
  • Member
  • PipPip
  • 38 posts
And yes, I'm still receiving them...
  • 0

#51
WhiteHat

WhiteHat

    Trusted Helper

  • Retired Staff
  • 1,925 posts
Hi,

I'm start thinking this is a false positive of your antivirus.

Download Ccleaner and remove the temp files.
http://www.piriform....leaner/download

Posted Image
  • 0

#52
hile

hile

    Member

  • Topic Starter
  • Member
  • PipPip
  • 38 posts
Ok, so I did that and restarted the computer. I guess I will wait and see what happens?
  • 0

#53
hile

hile

    Member

  • Topic Starter
  • Member
  • PipPip
  • 38 posts
Scan type: Auto-Protect Scan
Event: Risk Found!
Security risk detected: Trojan.Gen.2
File: C:\Users\Hilkka\AppData\Local\Temp\DWHF05E.tmp
Location: C:\Users\Hilkka\AppData\Local\Temp
Computer: HPMINI
User: Hilkka
Action taken: Pending Side Effects Analysis : Access denied
Date found: 3. tammikuuta 2013 21:02:02

So here they are again
  • 0

#54
WhiteHat

WhiteHat

    Trusted Helper

  • Retired Staff
  • 1,925 posts
Please, disable your antivirus and run Ccleaner again. I think he is impeding the software to clean the TEMP folder.
  • 0

#55
hile

hile

    Member

  • Topic Starter
  • Member
  • PipPip
  • 38 posts
I did that, but the notifications are coming again. :confused:
  • 0

Advertisements


#56
WhiteHat

WhiteHat

    Trusted Helper

  • Retired Staff
  • 1,925 posts
I was right, you are not infected:
http://www.symantec....p-temp-folder-0

"The issue of multiple DWH files being created and retained has been improved in SEP 11 Release Update 7 Maintenance Patch 2 (RU7 MP2) and SEP 12.1 RU1 MP1.

if you do not want to upgrade, use the workaround as mentioned in this URL

When new virus definitions are in place and the quarantine is being scanned, a DWH file is created and detected by Auto-Protect
"

See this post and do the solution steps:
http://www.symantec....t&id=TECH102953

:thumbsup:
  • 0

#57
hile

hile

    Member

  • Topic Starter
  • Member
  • PipPip
  • 38 posts
Oh ok! I did that. Wonder why the whole thing started. But thanks so much anyway!
  • 0

#58
WhiteHat

WhiteHat

    Trusted Helper

  • Retired Staff
  • 1,925 posts
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems

Now the best part of the day ----- Your log now appears clean

The following will implement some cleanup procedures as well as reset System Restore points:

Remove ComboFix

  • Hold down the Windows key + R on your keyboard. This will display the Run dialogue box
  • In the Run box, type in ComboFix /Uninstall (Notice the space between the "x" and "/") then click OK

    Posted Image
  • Follow the prompts on the screen
  • A message should appear confirming that ComboFix was uninstalled

Remove OTL

Run OTL and hit the Posted Image cleanup button. It will remove all the programmes we have used plus itself.

Posted Image Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version of Java components and upgrade the application.

Upgrading Java:
  • Go to this site and click Do I have Java
  • It will check your current version and then offer to update to the latest version

SPRING CLEAN

To manually create a new Restore Point
  • (If you use Windows 7/Vista)
  • Go to Control Panel and select System
  • Select System
  • On the left select System Protection and accept the warning if you get one
  • Select System Protection Tab
  • Select Create at the bottom
  • Type in a name i.e. Clean
  • Select Create

  • (If you use Windows XP)
  • Go to Start > All Programs > Acessories > System Tools > System Restore.
  • Select the option Create a restore point and click in Next.
  • Type in a name i.e. Clean
  • Select Create

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
Posted Image Malwarebytes. Update and run weekly to keep your system clean

Download and install FileHippo update checker and run it monthly it will show you which programmes on your system need updating and give a download link

It is critical to have both a firewall and anti virus to protect your system and to keep them updated. To keep your operating system up to date visit

To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place??

Keep safe.
  • 0

#59
hile

hile

    Member

  • Topic Starter
  • Member
  • PipPip
  • 38 posts
Hi!

I did that and everything seems fine. Thank you so much!
  • 0

#60
WhiteHat

WhiteHat

    Trusted Helper

  • Retired Staff
  • 1,925 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP