Need help with a Trojan

View previous topic View next topic Go down

Need help with a Trojan

Post by Michaelp2003 on Sun 21 Aug 2011, 11:19 am

Hopefully someone can offer any suggestions and all hope isnt lost. My mom got a virus today at her worked computer. Her anitvirus popped up saying trojan found. She didnt get a name for the trojan but after it was found the computer shut off. She was able to get it back on but all the files were deleted. She tried doing a system restore, and even under safe mode to no luck. It was unable to set a prior date. This computer had alot of billing information that maybe lost but am hoping someone out there has any suggestions on getting anything back. It would be alot of information to re-input for the business. Im pretty tech savvy from using this site in the past with other friends, just never encountered one that sounds this bad, so I plan on trying to help her. Any help you have to offer is greatly appreciated, thank you so much.

Michaelp2003

Unborn
Unborn

Posts : 1
Joined : 2011-08-21
Operating System : Windows

View user profile

Back to top Go down

Re: Need help with a Trojan

Post by Pancake on Sun 21 Aug 2011, 12:51 pm

Download OTL to your desktop.http://oldtimer.geekstogo.com/OTL.exe

Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
When the window appears, underneath Output at the top change it to Minimal Output.

Check the boxes beside LOP Check and Purity Check.
Under Custom Scan copy and paste the green text from the code box.

Code:


netsvcs
msconfig
safebootminimal
safebootnetwork
activex
drivers32
%systemroot%\System32\antiwpa.dll
%systemroot%\SYSTEM32\wpa.dll
%systemroot%\setup\scripts\biestart.exe
%systemroot%\system32\drivers\royal.sys
%systemroot%\system32\oobe\AntiWPA_Crypt.dll
%TEMP%\antiwpa_crypt.dll
%TEMP%\antiwpa.dll /s
%PROGRAMFILES%\antiwpa.dll /s
%systemroot%\system32\crypt.dll
%TEMP%\crypt.dll
%SYSTEMDRIVE%\*.
%SYSTEMDRIVE%\*.*
%PROGRAMFILES%\*.



Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.

When the scan completes, it will open two notepad windows. OTListIt.Txt and Extras.Txt. These are saved in the same location as OTL.
Please copy the contents of these files and post them with your next reply.If the text is to big,zip it up or post it in two or three parts.

=============================

Please download Malwarebytes' Anti-Malware from one of these places:

Majorgeeks or Besttechie


Double Click mbam-setup.exe to install the application.

* Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.

* Once the program has loaded, select "Perform Quick Scan", then click Scan.
* The scan may take some time to finish,so please be patient.
* When the scan is complete, click OK, then Show Results to view the results.
* Make sure that everything is checked, and click Remove Selected.
* When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.Do so.
* The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
* Copy&Paste the entire report in your next reply.







Home Town Web Page

Pancake

Tech Staff
Tech Staff

Posts : 222
Joined : 2010-03-06
Operating System : Windows 7

View user profile

Back to top Go down

View previous topic View next topic Back to top


 
Permissions in this forum:
You cannot reply to topics in this forum