Member Avatar for rhaynz

My antivirus always find this trojan but can't clean it because it always says that object can't be found..

not found: Trojan program Packed.Win32.Tdss.f File: globalroot\systemroot\system32\UACvxvamdib.dll//PE_Patch.MEW


Can anyone help me how to remove this mess.. I've tried reading articles from google search and I always see this solution wherein i should use mbam, hijackthis and combofix but i guess it requires assistance...

anyone, please help me... Also additional info, I always see iexplorer in my task manager even though i'm not using it.. it occupies large memory and i think it might be the effect of this virus..

  • 2 Contributors
  • 1 Reply
  • 137 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by jholland1964
Member Avatar for jholland1964

Have you tried ending these iexplorer processes?

Please do the following...BUT DON'T use combofix unless FIRST directed to do so...
Follow these steps:
Please Download ATF-Cleaner.exe by Atribune(Windows XP, 2K, 2003 & Vista ONLY)
You can put ATF-Cleaner on your Desktop for easy access. Leave it for now

Next, Right Click on the Desktop and choose New, Folder. Name this new folder HJT.
Next Please download HijackThis save it in that new folder you just created.
RUN ATF-Cleaner.exe.

-- Click on ATF-Cleaner to run it
-- Where it says Select Files To Delete, Check the Select All Option
-- Click Empty Selected > OK

If you use Firefox browser, do this also:

* Click Firefox at the top and choose Select All from the list.
* Click the Empty Selected button.
* NOTE : If you would like to keep your saved passwords, click No at the prompt.

Please download Malwarebytes' Anti-Malware (MBA-M) to your Desktop.

* DoubleClick mbam-setup.exe and follow the prompts to install MBA-M.
* Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When MBA-M finishes, Notepad will open with the log. Please save it where you can find it easily. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt.

REBOOT the computer.
Please Run the ESET Online Scanner and attach the ScanLog with your post for assistance.

* You will need to use Internet Explorer to to complete this scan.
* You will need to temporarily Disable your current Anti-virus program.
* Be sure the option to Remove found threats is and the option to Scan unwanted applications is Checked.
* When you have completed that scan, a scanlog ought to have been created and located at C:\Program Files\EsetOnlineScanner\log.txt. Please post that log for us as directed below.

Next do a Full System Scan with HiJackThis and save the log.
Post back here with the MBA-M log, the ESET Scanner log and the HJT log.
Judy

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.