Windows antivirus pro and others

View previous topic View next topic Go down

Windows antivirus pro and others

Post by Jendrek on 11th August 2009, 11:00 pm

i have many vithat allow me to do little to nothing on my computer. I believe i have windows antivirus pro, windows antivirus 2010, winsecure pro, and i'm sure i have others. i have used malwarebytes in the past but now i can't open it so when i reinstall and launch automatically the scan lasts about 2 seconds and exits. i also tried download hijack this to post a log but i am not able to open it. please i don't know what to do and this has beeen really frustrating me and if i could get a quick response i would be very appreciative

Jendrek
Novice
Novice

Posts Posts : 5
Joined Joined : 2009-08-11
OS OS : xp
Points Points : 26757
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Windows antivirus pro and others

Post by Belahzur on 12th August 2009, 5:09 pm

Please download the current version of HijackThis from [You must be registered and logged in to see this link.]

  • Double click and run the installer.
  • It will install to C:\Program Files\Trend Micro\HijackThis\hijackthis.exe
  • After installing, you should get the user agreement, press accept and Hijack This will run.
  • Select Do a system scan and save a log file. This will open a notepad file of everything Hijack This found, copy and paste it back here.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245079
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Windows antivirus pro and others

Post by Jendrek on 13th August 2009, 7:03 pm

sorry for the late response


i never got a user agreement but the icon shows up on my computer when i try to run it i get various errors such as
"Application cannot b eexecuted. THe file desot.exe is infected. DO you want to activate you antivirus software now?"
i always click no since i know this is caused by the virus
also sometime the program wont start at all without an error too

Jendrek
Novice
Novice

Posts Posts : 5
Joined Joined : 2009-08-11
OS OS : xp
Points Points : 26757
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Windows antivirus pro and others

Post by Belahzur on 14th August 2009, 6:23 pm

Hello.
Delete this file in bold:
C:\Windows\system32\desot.exe

Now when you run things, do you get an "open with.." box?


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245079
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Windows antivirus pro and others

Post by Jendrek on 14th August 2009, 10:29 pm

yes i do

Jendrek
Novice
Novice

Posts Posts : 5
Joined Joined : 2009-08-11
OS OS : xp
Points Points : 26757
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Windows antivirus pro and others

Post by Belahzur on 14th August 2009, 11:00 pm

Hello.
I want to check something.

Please download SystemLook from one of the links below and save it to your Desktop.
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]

  • Double-click SystemLook.exe to run it.
  • Copy the content of the following codebox into the main textfield:
    Code:

    :filefind
    scecli.dll
    netlogon.dll

  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245079
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Windows antivirus pro and others

Post by Jendrek on 15th August 2009, 2:25 am

here ya go


SystemLook v1.0 by jpshortstuff (22.05.09)
Log created at 21:20 on 14/08/2009 by HP_Administrator (Administrator - Elevation successful)

========== filefind ==========

Searching for "scecli.dll"
C:\WINDOWS\$NtServicePackUninstall$\scecli.dll -----c 180224 bytes [04:50 04/07/2008] [04:00 10/08/2004] 0F78E27F563F2AAF74B91A49E2ABF19A
C:\WINDOWS\ServicePackFiles\i386\scecli.dll ------ 181248 bytes [06:06 14/06/2008] [00:12 14/04/2008] A86BB5E61BF3E39B62AB4C7E7085A084
C:\WINDOWS\system32\scecli.dll --a--- 181248 bytes [08:34 03/07/2008] [10:42 14/04/2008] A86BB5E61BF3E39B62AB4C7E7085A084

Searching for "netlogon.dll"
C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll -----c 407040 bytes [04:50 04/07/2008] [04:00 10/08/2004] 96353FCECBA774BB8DA74A1C6507015A
C:\WINDOWS\ServicePackFiles\i386\netlogon.dll ------ 407040 bytes [06:06 14/06/2008] [00:12 14/04/2008] 1B7F071C51B77C272875C3A23E1E4550
C:\WINDOWS\system32\netlogon.dll --a--- 60416 bytes [08:34 03/07/2008] [10:42 14/04/2008] (Unable to calculate MD5)

-=End Of File=-

Jendrek
Novice
Novice

Posts Posts : 5
Joined Joined : 2009-08-11
OS OS : xp
Points Points : 26757
# Likes # Likes : 0

View user profile

Back to top Go down

Virus scan

Post by Sweetling87 on 15th August 2009, 3:02 am

It has me not getting into anything all that comes up is a black page with "system 32/desot.exe what do i do

Sweetling87
Novice
Novice

Posts Posts : 12
Joined Joined : 2009-08-15
OS OS : xp
Points Points : 26726
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Windows antivirus pro and others

Post by Belahzur on 15th August 2009, 3:25 pm

Sweetling87 - Start your own topic.

1. Please download The Avenger by Swandog46 to your Desktop
Link: [You must be registered and logged in to see this link.]

  • Click on Avenger.zip to open the file
  • Extract avenger.exe to your desktop
2. Copy all the text contained in the code box below to your Clipboard by highlighting it and pressing (Ctrl+CCrying


Files to delete:
C:\WINDOWS\system32\netlogon.dll

Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.


3. Now, start The Avenger program by clicking on its icon on your desktop.

  • Under "Input script here:", paste in the script from the quote box above.
  • Leave the ticked box "Scan for rootkit" ticked.
  • Then tick "Disable any rootkits found"
  • Now click on the Execute to begin execution of the script.
  • Answer "Yes" twice when prompted.

    The Avenger will automatically do the following:

  • It will Restart your computer.
  • On reboot, it will briefly open a black command window on your desktop, this is normal.
  • After the restart, it creates a log file that should open with the results of Avengerís actions. This log file will be located at C:\avenger.txt
  • The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
4. Please copy/paste the content of c:\avenger.txt into your reply.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245079
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Windows antivirus pro and others

Post by Jendrek on 16th August 2009, 4:47 am

before i do this could this cause seriuos damage to my computer?i kinda nervous about it.

what should happen once i delete that file?

sorry if i am being a little frustrating it's just that i like to figure out what would happen before i do it so i can help prevent any problems

Jendrek
Novice
Novice

Posts Posts : 5
Joined Joined : 2009-08-11
OS OS : xp
Points Points : 26757
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Windows antivirus pro and others

Post by Belahzur on 16th August 2009, 7:33 pm

Hello.
This is new malware, but we know how to beat it now, but as you saw, it seriously limits what we can do to beat it... leaving us with no choice but to override everything by using a more powerful tool.

I've beaten this before with no problems, it's fine, I know how to beat it and where it's hiding.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245079
# Likes # Likes : 1

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum