trojan virus...

Blade_runner_2

one of our computers got a trojan. i have run a scan with avg2011. it may have gone but a good chunk of our files have disappeared particularly a lot of photos in picasa which we are upset about. do we need to change any banking info or other...?

aliEnRIK

Dont assume its 'gone'

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM QUICK SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds
If anything was found then do the exact same but run a FULL scan


reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)
If you get a message that you cant write to the hosts file then Press the SHIFT key, and whilst holding it RIGHT CLICK and select RUN AS (admin)

RussJK

Photos are probably set to 'hidden'.
http://www.bleepingcomputer.com/tutorials/tutorial151.html

birkee

If the photo's are in Picasa, doesn't it need to scan the computer again to find them? Same as on first install?

So the question is, have the FILES gone, or is it just Picasa that is failing to see them?

jonathon

RussJK wrote: »

Photos are probably set to 'hidden'.
http://www.bleepingcomputer.com/tutorials/tutorial151.html

that is fantastic I thought I had lost all mine got them all back now thank you

Blade_runner_2

not sure if doing the wrong thing?

aliEnRIK

Before going onto hijack, what happened to the malwarebytes log?

as for hijack, what exactly is (or isnt) happening, and at what point?