Viruses, Spyware and...

Viruses, Spyware and other Nasties RSS

Virus has disabled antivirus programs/updates/site access (HT log )

•

Join Date: Jul 2008

Posts: 2,989

Reputation: jholland1964 is a name known to all

Solved Threads: 169

jholland1964 jholland1964 is offline

Offline

Posting Maven

Re: Virus has disabled antivirus programs/updates/site access (HT log )

#11

Dec 21st, 2008

•

Originally Posted by cohen

Suzie24 - Can you also post your MBA-M log. It will be located under the log tab.

Thanks,

Cohen

Cohen we need for her to upload that file first and check it out and post back with the results.
Judy

•

Join Date: Sep 2008

Posts: 11

Reputation: Suzie24 is an unknown quantity at this point

Solved Threads: 0

Suzie24

Offline

Newbie Poster

Re: Virus has disabled antivirus programs/updates/site access (HT log )

#12

Dec 22nd, 2008

Hey,

I can't find that file at that location, and I've got 'show hidden files' on. Is it possible that the file the scheduled task points to is no longer on my computer?

Thanks for your help!
Suzie

•

Join Date: Feb 2004

Posts: 10,013

Reputation: crunchie is a splendid one to behold

Solved Threads: 759

crunchie

Offline

Spyware Killer

Re: Virus has disabled antivirus programs/updates/site access (HT log )

#13

Dec 22nd, 2008

It's possible. Try this;

1. Please open Notepad

Click Start , then Run
Type notepad.exe in the Run Box.

2. Now copy/paste the entire content of the codebox below into the Notepad window:

Help with Code Tags

(Toggle Plain Text)

FileLook::
c:\windows\system32\w2O201yJ.exe

Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

3. Save the above as CFScript.txt

4. Physically disconnect from the internet.

5. Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.

6. Then drag the CFScript.txt into ComboFix.exe as depicted in the animation below. This will start ComboFix again.

Name: CFScript.gif
Views: 10
Size: 27.1 KB

Name: CFScript.gif
Views: 10
Size: 27.1 KB

7. After reboot, (in case it asks to reboot), please post the following reports/logs into your next replyafter you re-enable all the programs that were disabled during the running of ComboFix:

Combofix.txt
A new HijackThis log.

Please take note:

CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

Proud member of ASAP (Alliance of Security analysis Professionals).
Opera AVAST anti-virus Comodo Firewall Spywareblaster

•

Join Date: Sep 2008

Posts: 11

Reputation: Suzie24 is an unknown quantity at this point

Solved Threads: 0

Suzie24

Offline

Newbie Poster

Re: Virus has disabled antivirus programs/updates/site access (HT log )

#14

Dec 22nd, 2008

Hey,

Thanks so much for all your help with this! I'll do this as soon as I get chance--it turns out I got this virus just before heading home for the vacation (great timing, huh?) and I'm not taking my computer with me, so my poor computer will have to stay here untreated until I get back! Just wanted to let you know that I'm really grateful for all your help, and that I haven't disappeared for no reason, and will be back!

Thanks again,
Suzie