Trojan.Brisa.a

View previous topic View next topic Go down

Re: Trojan.Brisa.a

Post by Belahzur on Mon Mar 09, 2009 3:01 pm

1. Please download The Avenger by Swandog46 to your Desktop
Link: [You must be registered and logged in to see this link.] or [You must be registered and logged in to see this link.].

  • Click on Avenger.zip to open the file
  • Extract avenger.exe to your desktop
2. Copy all the text contained in the code box below to your Clipboard by highlighting it and pressing (Ctrl+CCrying


Folders to delete:
C:\Users\Jamie\documents\Frostwire

Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.


3. Now, start The Avenger program by clicking on its icon on your desktop.

  • Under "Input script here:", paste in the script from the quote box above.
  • Leave the ticked box "Scan for rootkit" ticked.
  • Then tick "Disable any rootkits found"
  • Now click on the Execute to begin execution of the script.
  • Answer "Yes" twice when prompted.

    The Avenger will automatically do the following:

  • It will Restart your computer.
  • On reboot, it will briefly open a black command window on your desktop, this is normal.
  • After the restart, it creates a log file that should open with the results of Avengerís actions. This log file will be located at C:\avenger.txt
  • The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
4. Please copy/paste the content of c:\avenger.txt into your reply.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Status :
Online
Offline

Posts : 34916
Joined : 2008-08-03
Gender : Male
OS : XP SP3 Media Centre

View user profile

Back to top Go down

Re: Trojan.Brisa.a

Post by jakes93 on Mon Mar 09, 2009 3:37 pm

Logfile of The Avenger Version 2.0, (c) by Swandog46
[You must be registered and logged in to see this link.]

Platform: Windows Vista

*******************

Script file opened successfully.
Script file read successfully.

jakes93
Novice
Novice

Status :
Online
Offline

Posts : 46
Joined : 2009-03-08
OS : WINDOWS 7

View user profile

Back to top Go down

Re: Trojan.Brisa.a

Post by Belahzur on Mon Mar 09, 2009 3:43 pm

There should be more to the log file.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Status :
Online
Offline

Posts : 34916
Joined : 2008-08-03
Gender : Male
OS : XP SP3 Media Centre

View user profile

Back to top Go down

Re: Trojan.Brisa.a

Post by jakes93 on Mon Mar 09, 2009 3:47 pm

Logfile of The Avenger Version 2.0, (c) by Swandog46
[You must be registered and logged in to see this link.]

Platform: Windows Vista

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

Folder "C:\Users\Jamie\documents\Frostwire" deleted successfully.

Completed script processing.

*******************

Finished! Terminate.
thats all of it.

jakes93
Novice
Novice

Status :
Online
Offline

Posts : 46
Joined : 2009-03-08
OS : WINDOWS 7

View user profile

Back to top Go down

Re: Trojan.Brisa.a

Post by Belahzur on Mon Mar 09, 2009 3:47 pm

The folder should be gone now. Smile


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Status :
Online
Offline

Posts : 34916
Joined : 2008-08-03
Gender : Male
OS : XP SP3 Media Centre

View user profile

Back to top Go down

Re: Trojan.Brisa.a

Post by jakes93 on Mon Mar 09, 2009 3:49 pm

yes its gone, should I delete the back up of it?

jakes93
Novice
Novice

Status :
Online
Offline

Posts : 46
Joined : 2009-03-08
OS : WINDOWS 7

View user profile

Back to top Go down

Re: Trojan.Brisa.a

Post by Belahzur on Mon Mar 09, 2009 3:51 pm

Yep.
C:\avenger


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Status :
Online
Offline

Posts : 34916
Joined : 2008-08-03
Gender : Male
OS : XP SP3 Media Centre

View user profile

Back to top Go down

Re: Trojan.Brisa.a

Post by jakes93 on Mon Mar 09, 2009 3:56 pm

It says that I need permission complete this action, which I give then the same information box comes up, so I press continue and the box comes up again.

jakes93
Novice
Novice

Status :
Online
Offline

Posts : 46
Joined : 2009-03-08
OS : WINDOWS 7

View user profile

Back to top Go down

Re: Trojan.Brisa.a

Post by Belahzur on Mon Mar 09, 2009 4:01 pm

Hmmm.
Lets try this, hopefully this can do it.

Please download the Unlocker from here:
[You must be registered and logged in to see this link.]
Download to the desktop and install.

Once installed, right click the avenger folder > Select "Unlocker"
It will open another window with a few different options and will say what process is using it.
See this guide for reference:
[You must be registered and logged in to see this link.]


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Status :
Online
Offline

Posts : 34916
Joined : 2008-08-03
Gender : Male
OS : XP SP3 Media Centre

View user profile

Back to top Go down

Re: Trojan.Brisa.a

Post by jakes93 on Mon Mar 09, 2009 4:05 pm

It is deleted from the hard drive, should I delete it from the recycle bin?

jakes93
Novice
Novice

Status :
Online
Offline

Posts : 46
Joined : 2009-03-08
OS : WINDOWS 7

View user profile

Back to top Go down

Re: Trojan.Brisa.a

Post by Belahzur on Mon Mar 09, 2009 4:06 pm

Yes.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Status :
Online
Offline

Posts : 34916
Joined : 2008-08-03
Gender : Male
OS : XP SP3 Media Centre

View user profile

Back to top Go down

Re: Trojan.Brisa.a

Post by jakes93 on Mon Mar 09, 2009 4:07 pm

Thank you everything looks sorted.

jakes93
Novice
Novice

Status :
Online
Offline

Posts : 46
Joined : 2009-03-08
OS : WINDOWS 7

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum