Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Trojan.downloader9.55030 [Solved]


  • This topic is locked This topic is locked

#16
mango_nj

mango_nj

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 206 posts
LOL! I'm not going anywhere till you say it's safe to do so.

Ready when you are :lol:
  • 0

Advertisements


#17
pystryker

pystryker

    Trusted Helper

  • Malware Removal
  • 3,886 posts

LOL! I'm not going anywhere till you say it's safe to do so.

Ready when you are :lol:


:thumbsup: I'm actually working on the final steps now, and I'll post them in the morning after they are approved. :)
  • 0

#18
pystryker

pystryker

    Trusted Helper

  • Malware Removal
  • 3,886 posts

I'm so glad everything looks good!
You did a great job...thank you!!!!


You are welcome, I'm glad we were able to help you, which leads me to this:

Great news, your logs are CLEAN! :thumbsup: :) We still have a few things we need to address namely:

  • I need to remove the tools we installed on your machine.
  • We also have some programs on your machine that need updating to help protect you in the future.


Step 1: Delete Old Restore Points and Create a New Clean One.


We're going to delete your old restore points and create a new one. We do this in case you need to do a system restore, you will have a clean restore point.

Please follow the instructions below:

  • Start OTL and copy the text in the quote box below.
  • Paste the contents into the Custom Scans/Fixes box and click the Run Fix button.
  • OTL will delete the old restore points and create a new one.

:Files
%systemroot%\system32\vssadmin delete shadows /for=c: /all /quiet /c

:Commands
[CreateRestorePoint]



Step 2: Update Adobe Reader and Install FileHippo


Updating Adobe Reader

  • Malware will exploit any vulnerabilities it can find in outdated software. If you are using Adobe Reader for reading pdf files, try using FoxIt Reader. It is a very capable alternative to Adobe.
  • Please click here to download FoxIt Reader.
  • If you wish to continue to use Adobe Reader, then please update it by clicking here.
  • Please remember to uncheck the option to install McAfee's Security Suite.


Keeping your software updated

Another weapon against malicious programs and viruses is to keeping other programs updated. There are several programs out there that can check for out of date programs on your computer. One is Filehippo. You can run this on a weekly or monthly basis to check your programs for updates and then it will provide a link for you to download them.

Download Filehippo Updatechecker


Step 3: Tool Removal


You can delete SystemLook from your desktop.

You can uninstall ESET Online Scanner at this time.

I recommend keeping Malwarebytes Anti-Malware installed. Make sure to update it and run it at least once a week.

Start OTL and click the Cleanup button. OTL will delete it's quarantined files and then uninstall itself.


Step 4: Information and Protecting your machine against CryptoLocker

  • Watch what you open in your emails. If you get an email from an unknown source with any attached files, do not open it.
  • Be careful of the websites you visit.
  • When installing new programs, don't be "click happy" and click through the screens. Many programs come with adware in them and are set to install them by default. Several programs require that you uncheck or select no to prevent the installation. Take you time and read each screen as you go. :)
  • To help protect yourself while on the web, I recommend you read How did I get infected in the first place?

A warning about CryptoLocker

CryptoLocker is a ransomware program that was released around the beginning of September 2013 that targets all versions of Windows including Windows XP, Windows Vista, Windows 7, and Windows 8. This ransomware will encrypt certain files using a mixture of RSA & AES encryption. When it has finished encrypting your files, it will display a CryptoLocker payment program that prompts you to send a ransom of either $100 or $300 in order to decrypt the files. This screen will also display a timer stating that you have 72 hours, or 4 days, to pay the ransom or it will delete your encryption key and you will not have any way to decrypt your files. This ransom must be paid using MoneyPak vouchers or Bitcoins. Once you send the payment and it is verified, the program will decrypt the files that it encrypted.

Please download and install CryptoPrevent to lock your machine down from this infection.

Posted Image


Are there any further issues I can assist you with?
  • 0

#19
mango_nj

mango_nj

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 206 posts
Hi Rusty!

When I tried to set a new restore point via OTL,
Kaspersky sent an alert stating it was malicious
activity detected:

PDM: Trojan.Win32.Generic

I figured this may be a false alert, but I terminated
the process anyway to be sure. Please advise and let me
know if I should ignore this alert next time and proceed.

Edited by mango_nj, 15 February 2014 - 10:10 PM.

  • 0

#20
pystryker

pystryker

    Trusted Helper

  • Malware Removal
  • 3,886 posts

Hi Rusty!

When I tried to set a new restore point via OTL,
Kaspersky sent an alert stating it was malicious
activity detected:

PDM: Trojan.Win32.Generic

I figured this may be a false alert, but I terminated
the process anyway to be sure. Please advise and let me
know if I should ignore this alert next time and proceed.



Hello :)
Disable Kaspersky before running that restore point creation. That should allow the new restore point to be created. :)
  • 0

#21
mango_nj

mango_nj

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 206 posts
Hi Rusty! ALL DONE :yeah:

I also decided to try FoxIt Reader and see if I like it better than Adobe
and I installed CryptoLocker. Thank you for everything!!!!

I guess I should be on my way. You did an excellent job! Hard
to believe you're still in training. You have a great teacher.

appreciate your patience...

YOU ARE AWESOME!!! :wave:
  • 0

#22
pystryker

pystryker

    Trusted Helper

  • Malware Removal
  • 3,886 posts

Hi Rusty! ALL DONE :yeah:

I also decided to try FoxIt Reader and see if I like it better than Adobe
and I installed CryptoLocker. Thank you for everything!!!!

I guess I should be on my way. You did an excellent job! Hard
to believe you're still in training. You have a great teacher.

appreciate your patience...

YOU ARE AWESOME!!! :wave:



Thank you :) You are very much welcome, and I'm glad we could help you. :thumbsup: I appreciate your patience as well, and if you need us again, please don't hesitate to come back.

Safe surfing! :cool:
  • 0

#23
Dakeyras

Dakeyras

    Anti-Malware Mammoth

  • Expert
  • 9,684 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP