| | |
downloader-AFH
Thread Solved |
Go here and read the characteristics,symptoms and such and it will tell you how to remove.you will need to get into the registry so do exactly as it says.
to see the winstall.exe you may need to go to in my computer - tools - folder options - view and uncheck Hide protected operating system files.
http://vil.nai.com/vil/content/v_136151.htm
to see the winstall.exe you may need to go to in my computer - tools - folder options - view and uncheck Hide protected operating system files.
http://vil.nai.com/vil/content/v_136151.htm
Do it again but this time disable your system restore if you do not know how go here.
http://vil.nai.com/vil/SystemHelpDoc...ysRestore.aspx
Also run this free online scan:
http://housecall.trendmicro.com/
After you have done that go here and get HiJackTthis.
http://www.merijn.org/files/hijackthis.zip
run it save log file it will put it where ever you put HJT.I make a folder in my root directory called HiJackThis and put HJT in there.now open the log file copy and paste it in this site.
http://www.hijackthis.de/en
Click analayze it will tell you what to have it fix and what not to fix.
after you are done reboot re-eanble system restore that should take care of it.
http://vil.nai.com/vil/SystemHelpDoc...ysRestore.aspx
Also run this free online scan:
http://housecall.trendmicro.com/
After you have done that go here and get HiJackTthis.
http://www.merijn.org/files/hijackthis.zip
run it save log file it will put it where ever you put HJT.I make a folder in my root directory called HiJackThis and put HJT in there.now open the log file copy and paste it in this site.
http://www.hijackthis.de/en
Click analayze it will tell you what to have it fix and what not to fix.
after you are done reboot re-eanble system restore that should take care of it.
the reason the virus might keep coming back is it may be hiding in your system restore area.
boot into safemode (hit f8 repeatedly during windows initial startup)
login as admin
right click on your harddisk and turn system restore off under properties (this wil delete any restore points!)
reboot back into safemode again and turn it back on
start windows normally
boot into safemode (hit f8 repeatedly during windows initial startup)
login as admin
right click on your harddisk and turn system restore off under properties (this wil delete any restore points!)
reboot back into safemode again and turn it back on
start windows normally
If i am helpful, please give me reputation points.
That's not a stupid question Bud.
No such thing as a Stupid Question just Stupid Answers.LOL
Yes when you paste the log in the analyzer it will have a green check next to good and a yellow next to what has been reported as non threat read the thing next to the marks the red Xs definetley Fix.
The yellow if your not for sure what they are fix anyway.
what you do is with HiJackThis is when you do a scan it has a list of stuff there will be a box next to each one.any box you put a check mark in and at the bottom click fix checked it will fix.
No such thing as a Stupid Question just Stupid Answers.LOL
Yes when you paste the log in the analyzer it will have a green check next to good and a yellow next to what has been reported as non threat read the thing next to the marks the red Xs definetley Fix.
The yellow if your not for sure what they are fix anyway.
what you do is with HiJackThis is when you do a scan it has a list of stuff there will be a box next to each one.any box you put a check mark in and at the bottom click fix checked it will fix.
•
•
Join Date: Oct 2006
Posts: 18
Reputation:
Solved Threads: 0
Man alive its come back... i cant believe it. I checked the HijackThis list and found that this (below) was the only red mark that came up. so i can only assume that this is whats causing the problem. Im getting pretty cheesed off, it could be a website that im going on that is getting the trojan on my computer. Any suggestion?O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
http://www.hijackthis.de/gfx/state/nasty.gif
http://www.hijackthis.de/gfx/state/rating_0.gif
The entry &AOL Toolbar search has been identified as nasty.
http://www.hijackthis.de/gfx/state/nasty.gif
http://www.hijackthis.de/gfx/state/rating_0.gif
The entry &AOL Toolbar search has been identified as nasty.
![]() |
Other Threads in the Viruses, Spyware and other Nasties Forum
- Previous Thread: Help! HJT log can't access internet anymore
- Next Thread: isamonitor dll error trojan horse adware/spyware http://iehomepages.com/
| Thread Tools | Search this Thread |
Tag cloud for Viruses, Spyware and other Nasties
acrobat adobe adware anti-malware anti-virussitesaccessissue antivirus apple attack avg backtoschoolspeech bar blackhat botnet botnets censorship china commercial conficker connect control cyber cybercrime cyberwarfare ddos education email europe exam exploit fake fancheckvirus gaming gtaiv halloween herss.exe hijack hosting internet iphone kaspersky legal malware mcafee messagelabs microsoft mobile msn nazi news obama onlinethreats paedophile parents patch pdf phishing police policeprovirusmba-mblockedinternetaccess president pro problem redirect report research risk rogueantivirus rootkit samhain sans search security seopoisoning sites software spam spyware spywareexternalwindows7adminstratortrojans sqlinjection symantec system teen threat translate trojan unabletoaccessanti-virussites unwanted update usa virus viruses vista volume vulnerability war warning windows worm yahoo zero-day zeroday






