trojan in archived files!!!!!!

Rex_Mundi

glitter58 wrote:

This hijack this site is amazing.
Now all I have to figure out is how to fix all the problems it has shown up.

Run Hijackthis again. Put a tick next to the entries that have have shown up bad, then click fix.

glitter58

Thanks, do I do this in safe mode again.

Quincy_3

Nah not Hijack, I mean run any antivirus in safe mode.

glitter58

Right will be back in an hour or two when its all done and hope virus free by then.
Thanks again you are a star

Browntoa

I noticed one of the items is for a site called downloadv3com which seems to allow access to some more ...ahem....."Adult" material, may be the source of your infection, if it was another user of the PC I would advise them not to download these sort of attachments

Quincy_3

Browntoa wrote:

"Adult" material, may be the source of your infection,

It usually is :rotfl: :rotfl:

Browntoa

these are also wrong

85.255.116.147,85.255.112.6

fixwareout will fix that, see here

http://www.geekstogo.com/forum/index.php?showtopic=106696

pchelpman

Browntoa wrote:

these are also wrong ... 85.255.116.147,85.255.112.6

Right on, BT. Our friends at RIPE stike again. The underlying source of those numbers is
in the Ukraine. Home of the VX2 mob and the Russian mafia.

Word of warning ... be VERY careful what you decide to remove using HJT. Get it wrong and you could end up trashing your system. Quincy rightly describes the HJT analyser as a "guide". No more than that. It will pick up things in your log that are not "bad".

My advice ... you make your own decisions. Fix whatever you chose to, after all the thoughts expressed here, then post a new HJT log with an update on how your system is operating now.

Browntoa

they've been gone more than an hour , maybe the warning about HJT is too late !!! :eek:

lol

pchelpman

Time passes .... are you OK, glitter?