GeekPolice
Welcome to GeekPolice.net!

From "wow" to "whoa" - we're teaching practical technology and helping others with tech support. Join our family here!

You are viewing the forum as a "Guest" which doesn't give you member privileges to ask questions or post comments.

Take 30 seconds to register or log in below and unlock the limitations of this website to discover new computer knowledge!

Cannot Remove 'Troj/Rustok-N'. I cant access some websites because of it.

View previous topic View next topic Go down

Re: Cannot Remove 'Troj/Rustok-N'. I cant access some websites because of it.

Post by mk123 on Tue Jun 23, 2009 3:47 am

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_CREATE_NAMED_PIPE]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_CLOSE]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_READ]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_WRITE]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_QUERY_INFORMATION]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SET_INFORMATION]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_QUERY_EA]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SET_EA]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_FLUSH_BUFFERS]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_QUERY_VOLUME_INFORMATION]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SET_VOLUME_INFORMATION]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_DIRECTORY_CONTROL]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_FILE_SYSTEM_CONTROL]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_DEVICE_CONTROL]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_INTERNAL_DEVICE_CONTROL]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SHUTDOWN]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_LOCK_CONTROL]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_CLEANUP]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_CREATE_MAILSLOT]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_QUERY_SECURITY]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SET_SECURITY]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_POWER]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SYSTEM_CONTROL]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_DEVICE_CHANGE]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_QUERY_QUOTA]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SET_QUOTA]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: MRxSmb, IRP_MJ_PNP]
Process: System Address: 0x821751f8 Size: 121

Object: Hidden Code [Driver: Cdfsࠅఆ剒敬─, IRP_MJ_CREATE]
Process: System Address: 0x81fe7500 Size: 121

Object: Hidden Code [Driver: Cdfsࠅఆ剒敬─, IRP_MJ_CLOSE]
Process: System Address: 0x81fe7500 Size: 121

Object: Hidden Code [Driver: Cdfsࠅఆ剒敬─, IRP_MJ_READ]
Process: System Address: 0x81fe7500 Size: 121

Object: Hidden Code [Driver: Cdfsࠅఆ剒敬─, IRP_MJ_QUERY_INFORMATION]
Process: System Address: 0x81fe7500 Size: 121

Object: Hidden Code [Driver: Cdfsࠅఆ剒敬─, IRP_MJ_SET_INFORMATION]
Process: System Address: 0x81fe7500 Size: 121

Object: Hidden Code [Driver: Cdfsࠅఆ剒敬─, IRP_MJ_QUERY_VOLUME_INFORMATION]
Process: System Address: 0x81fe7500 Size: 121

Object: Hidden Code [Driver: Cdfsࠅఆ剒敬─, IRP_MJ_DIRECTORY_CONTROL]
Process: System Address: 0x81fe7500 Size: 121

Object: Hidden Code [Driver: Cdfsࠅఆ剒敬─, IRP_MJ_FILE_SYSTEM_CONTROL]
Process: System Address: 0x81fe7500 Size: 121

Object: Hidden Code [Driver: Cdfsࠅఆ剒敬─, IRP_MJ_DEVICE_CONTROL]
Process: System Address: 0x81fe7500 Size: 121

Object: Hidden Code [Driver: Cdfsࠅఆ剒敬─, IRP_MJ_SHUTDOWN]
Process: System Address: 0x81fe7500 Size: 121

Object: Hidden Code [Driver: Cdfsࠅఆ剒敬─, IRP_MJ_LOCK_CONTROL]
Process: System Address: 0x81fe7500 Size: 121

Object: Hidden Code [Driver: Cdfsࠅఆ剒敬─, IRP_MJ_CLEANUP]
Process: System Address: 0x81fe7500 Size: 121

Object: Hidden Code [Driver: Cdfsࠅఆ剒敬─, IRP_MJ_PNP]
Process: System Address: 0x81fe7500 Size: 121

==EOF==

mk123
Novice
Novice

Status :
Online
Offline

Posts : 18
Joined : 2009-06-11
OS : Windows XP
Points : 27330
# Likes : 0

View user profile

Back to top Go down

Re: Cannot Remove 'Troj/Rustok-N'. I cant access some websites because of it.

Post by Origin on Tue Jun 23, 2009 4:34 pm

Please use the Internet Explorer browser, and do an online scan with [You must be registered and logged in to see this link.]

Note: If you have used this particular scanner before, you MAY HAVE TO UNINSTALL the program through Add/Remove Programs before downloading the new ActiveX component

Click Accept, when prompted to download and install the program files and database of malware definitions.

  • Click Run at the Security prompt.
  • The program will then begin downloading and installing and will also update the database.
  • Please be patient as this can take several minutes.
  • Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
  • Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
  • Do NOT be alarmed by what you see in the report. Many of the finds have likely been quarantined.
  • Click View scan report at the bottom.
  • Click the Save as Text button to save the file to your desktop so that you may post it in your next reply.

    **Note**

    To optimize scanning time and produce a more sensible report for review:

  • Close any open programs.
  • Turn off the real-time scanner of all antivirus or antispyware programs while performing the online scan.

Note for Internet Explorer 7 users: If at any time you have trouble viewing the accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75%. Once the license is accepted, reset to 100%.


While my help is always free, please consider donating to keep this site alive: [You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.]

Origin
Master
Master

Status :
Online
Offline

Posts : 2685
Joined : 2009-05-05
Gender : Male
OS : Windows Xp Sp3
Points : 31443
# Likes : 0

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum