Banker Fox.A and Win32/Nuqel.e removal

View previous topic View next topic Go down

Banker Fox.A and Win32/Nuqel.e removal

Post by sbahorek on 22nd February 2010, 3:13 pm

PC is infected w/ this virus/trojan. No internet access allowed, so download is not possible. However, can copy files from network drive over to PC desktop. Downloaded HijackThis on another PC, copied files to infected PC desktop, tried to install, virus blocked install. Will not reboot into Safe Mode. Haven't tried to install MalwareBytes but assume I'll get the same results. Now what?

sbahorek
Beginner
Beginner

Posts Posts : 2
Joined Joined : 2010-02-22
OS OS : Vista, XP
Points Points : 24858
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Banker Fox.A and Win32/Nuqel.e removal

Post by Belahzur on 22nd February 2010, 8:58 pm

Download [You must be registered and logged in to see this link.] by OldTimer to your Desktop.

  • Close all windows and double click OTL.exe
  • Click Run Scan and let the program run uninterrupted
  • It will produce two logs for you, one will pop up - OTL.txt, the other will be saved on your Desktop - Extras.txt. Post both logs in this thread.
  • You may need to use two posts to get it all.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245121
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Banker Fox.A and Win32/Nuqel.e removal

Post by sbahorek on 24th February 2010, 5:01 pm

Thanks. Before seeing your post here's what I did. Infected PC is on home network; shared hard drive (C:) on infected PC. Went to another computer on network and mapped network drive to infected drive. Ran Symantec AV on clean computer scanning mapped drive. 2 infected files found; deleted. Then ran MalwareBytes from clean PC scanning mapped drive. 6 infected files; removed. Rebooted infected pc and virus did not activate. IE could not access internet; proxy server setting was checked; unchecked that and now ok. All's well as far as I can tell.

sbahorek
Beginner
Beginner

Posts Posts : 2
Joined Joined : 2010-02-22
OS OS : Vista, XP
Points Points : 24858
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Banker Fox.A and Win32/Nuqel.e removal

Post by Belahzur on 24th February 2010, 8:23 pm

Hello.
Nice one, but run OTL just to be sure please.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245121
# Likes # Likes : 1

View user profile

Back to top Go down

OTL

Post by cbear1366 on 26th March 2010, 9:45 pm

where do i find the download for otl for Old Timer

cbear1366
Beginner
Beginner

Posts Posts : 1
Joined Joined : 2010-03-26
OS OS : windows xp
Points Points : 24535
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Banker Fox.A and Win32/Nuqel.e removal

Post by Belahzur on 27th March 2010, 5:33 pm

Hello.

[You must be registered and logged in to see this link.]

The bolded text is a hyperlink, click it and it should let you download it.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245121
# Likes # Likes : 1

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum