Trojan damage

Post your HijackThis! Log here for spyware removal

Moderators: Admin Team, Moderators

Forum rules
ATTN:!! Only users pre-approved by TeMerc may offer help and assistance in malware removal. Any and all unauthorized posts will be removed without notice. Please read this thread for proper HijackThis! installation.
mojo13
Posts: 323
Joined: Tue Feb 20, 2007 5:45 am
experience: I know the functions, OS settings, registry tweaks and more
PC time: More than 4 hours a day
Contact:

Trojan damage

Postby mojo13 » Sat Apr 21, 2012 4:45 am

The trojans have been removed but the after effects are not too good. Everything from logging in to getting on the internet have been affected. Please check the attached log file.
Attachments
hijackthis-jh.txt
(10.56 KiB) Downloaded 229 times
mojo

User avatar
TeMerc
Site Admin
Site Admin
Posts: 15995
Joined: Fri Jan 28, 2005 5:16 pm
Area Of Expertise: Security
experience: I know the functions, OS settings, registry tweaks and more
PC time: What else is there in life?
Location: PHX, AZ
Contact:

Re: Trojan damage

Postby TeMerc » Tue Apr 24, 2012 12:15 am

Hi Mojo 1rokon

Nothing in the log, what specifically are you having issues with? What was removed and with what tools?
Image

mojo13
Posts: 323
Joined: Tue Feb 20, 2007 5:45 am
experience: I know the functions, OS settings, registry tweaks and more
PC time: More than 4 hours a day
Contact:

Re: Trojan damage

Postby mojo13 » Tue Apr 24, 2012 3:33 am

There was a fake.av trojan and something that had dork in the name. SuperAntiSpyware removed them but I did have to re-image the computer because MS Office files would not run. i was getting an out of memory error, etc.
mojo

User avatar
TeMerc
Site Admin
Site Admin
Posts: 15995
Joined: Fri Jan 28, 2005 5:16 pm
Area Of Expertise: Security
experience: I know the functions, OS settings, registry tweaks and more
PC time: What else is there in life?
Location: PHX, AZ
Contact:

Re: Trojan damage

Postby TeMerc » Tue Apr 24, 2012 11:25 pm

mojo13 wrote:There was a fake.av trojan and something that had dork in the name. SuperAntiSpyware removed them but I did have to re-image the computer because MS Office files would not run. i was getting an out of memory error, etc.

Ok, well if it's re-imaged, I suppose it's running ok at this point?

No log from SAS?
Image

mojo13
Posts: 323
Joined: Tue Feb 20, 2007 5:45 am
experience: I know the functions, OS settings, registry tweaks and more
PC time: More than 4 hours a day
Contact:

Re: Trojan damage

Postby mojo13 » Wed Apr 25, 2012 3:31 am

No, unfortunately when it was imaged the log was lost. But the trojans lived on with the usb drive I saved the data on and MSE had to remove them from it. What had actually happened before the drive was cleaned the trojan changed all the files to shortcuts and then MSE cleaned the trojan off but also cleaned the shortcuts off. The files are still on the drive but are hidden. I do not know how to make them visible again. ((O
mojo

mojo13
Posts: 323
Joined: Tue Feb 20, 2007 5:45 am
experience: I know the functions, OS settings, registry tweaks and more
PC time: More than 4 hours a day
Contact:

Re: Trojan damage

Postby mojo13 » Wed Apr 25, 2012 3:31 am

BTW, I used a little utility called "unhide" but it still did not let them appear on the usb drive. When I re-ran the virus scan it showed the files as they were being scanned but they remain hidden to view.
mojo

User avatar
TeMerc
Site Admin
Site Admin
Posts: 15995
Joined: Fri Jan 28, 2005 5:16 pm
Area Of Expertise: Security
experience: I know the functions, OS settings, registry tweaks and more
PC time: What else is there in life?
Location: PHX, AZ
Contact:

Re: Trojan damage

Postby TeMerc » Wed Apr 25, 2012 11:46 pm

mojo13 wrote:BTW, I used a little utility called "unhide" but it still did not let them appear on the usb drive. When I re-ran the virus scan it showed the files as they were being scanned but they remain hidden to view.

Pretty sure this tool won't run to fix a stick properties.
Image

mojo13
Posts: 323
Joined: Tue Feb 20, 2007 5:45 am
experience: I know the functions, OS settings, registry tweaks and more
PC time: More than 4 hours a day
Contact:

Re: Trojan damage

Postby mojo13 » Thu Apr 26, 2012 4:12 am

TeMerc wrote:
mojo13 wrote:BTW, I used a little utility called "unhide" but it still did not let them appear on the usb drive. When I re-ran the virus scan it showed the files as they were being scanned but they remain hidden to view.

Pretty sure this tool won't run to fix a stick properties.


So should I format the usb drive and lose the data?
mojo

User avatar
TeMerc
Site Admin
Site Admin
Posts: 15995
Joined: Fri Jan 28, 2005 5:16 pm
Area Of Expertise: Security
experience: I know the functions, OS settings, registry tweaks and more
PC time: What else is there in life?
Location: PHX, AZ
Contact:

Re: Trojan damage

Postby TeMerc » Thu Apr 26, 2012 11:12 pm

mojo13 wrote:
TeMerc wrote:
mojo13 wrote:BTW, I used a little utility called "unhide" but it still did not let them appear on the usb drive. When I re-ran the virus scan it showed the files as they were being scanned but they remain hidden to view.

Pretty sure this tool won't run to fix a stick properties.


So should I format the usb drive and lose the data?

Sort of depends what's on it, if nothing of importance, then yes, if there is, then you'll need to figure out how to save the data.
Image

mojo13
Posts: 323
Joined: Tue Feb 20, 2007 5:45 am
experience: I know the functions, OS settings, registry tweaks and more
PC time: More than 4 hours a day
Contact:

Re: Trojan damage

Postby mojo13 » Fri Apr 27, 2012 3:30 am

Once view hidden and system files was selected on the machine I was able to retrieve the documents and get them restored.

You can close this one and thanks for looking at it for me. [;]
mojo


Return to “Countermeasures: HijackThis! Spyware Help”

Who is online

Users browsing this forum: No registered users and 1 guest