We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!
The Forum now has a brand new text editor, adding a bunch of handy features to use when creating posts. Read more in our how-to guide

Can someone help me? Trojan

123578

Comments

  • yummymsmummy
    yummymsmummy Posts: 182 Forumite
    :mad:

    Combofix has done the same this time too - gone through all the stages, gone through deleted files, then frozen. The cursor is ticking but NOTHING is happening, the light on my PC isn't doing anything so its not even 'thinking' :pCtrl+Alt+Del isn't working so i can't access Task Manager. What shall i do?
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Shut the computer down
    :idea:
  • yummymsmummy
    yummymsmummy Posts: 182 Forumite
    Thanks - its what i did earlier but wasn't sure if that was the right thing to do then either lol

    So i have no log to post - will Combofix have deleted those infections? Should i run Kaspersky again?

    Many thanks for your help, its much appreciated :o
  • andy2004
    andy2004 Posts: 1,309 Forumite
    Restart the computer in safe mode.
    then using windows explorer. check the following files have been deleted
    File::
    C:\Documents and Settings\Clare\Application Data\Sun\Java\Deployment\cache\6.0\43\27c1206b-3a2d6d87
    C:\Documents and Settings\Clare\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\jvm impro.jar-54e206d6-2e392bbc.zip
    c:\windows\system32\aswBoot.exe
    c:\documents and settings\Clare\Application Data\Sun\Java\jre1.6.0_13\lzma.dll
    c:\windows\Temp\Perflib_Perfdata_564.dat
    c:\windows\Temp\Perflib_Perfdata_714.dat

    Folder::
    C:\Documents and Settings\Clare\Application Data\Sun\Java\Deployment\cache\6.0\43\27c1206b-3a2d6d87
    c:\documents and settings\All Users\Application Data\PopCap


    Now if any of those are still there right click and delete, restart, download the newest Combofix.exe and run another scan. Combofix got updated today.
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Do as andy said. It will show us if they were removed or not. No need to run kaspersky again
    :idea:
  • yummymsmummy
    yummymsmummy Posts: 182 Forumite
    They have not been deleted.

    Will get rid of Combofix and install again, run, and post log.
  • yummymsmummy
    yummymsmummy Posts: 182 Forumite
    Hubby installed win-rar a few weeks ago which seems to be part of the problem, at least one of those files had the win-rar icon :confused:
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    that doesnt mean winrar is the problem (Though it might be). It means that one of the downloaded rar files is infected
    :idea:
  • yummymsmummy
    yummymsmummy Posts: 182 Forumite
    Have uninstalled it anyway. Do i need to create a CFScript again or just run Combofix straight off?
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    you need to run the script
    :idea:
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 353.8K Banking & Borrowing
  • 254.2K Reduce Debt & Boost Income
  • 455.2K Spending & Discounts
  • 246.9K Work, Benefits & Business
  • 603.4K Mortgages, Homes & Bills
  • 178.2K Life & Family
  • 260.9K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16K Discuss & Feedback
  • 37.7K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.