|
viknok
Aug 14, 2014 0:29:34 GMT -8
Post by lemony on Aug 14, 2014 0:29:34 GMT -8
ok, I will wait till tomorrow before I do the eset scanner.
|
|
|
viknok
Aug 15, 2014 5:46:14 GMT -8
Post by lemony on Aug 15, 2014 5:46:14 GMT -8
Results from the eset scan. You were not kidding when you said the scan would take some time.
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
viknok
Aug 15, 2014 10:59:25 GMT -8
Post by Quads on Aug 15, 2014 10:59:25 GMT -8
By the looks of the FRST log, Adwcleaner log and ESET log there was not enough to worry about using OTL. There is just left overs of Tracur and Viknok.
Disable Norton Auto-Protect and SONAR for say 1 hour in the options and NOT "Until next system restart". This is because FRST may need to restart the system and due to the fact Norton detects the file and FRST we don't want Norton to interfere.
You may want to read carefully all of this message first before starting the steps.
NOTE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Download the script attached, needs to be the same file name as well (fixlist.txt), have it on the Desktop, so that fixlist.txt is next to FRST64.exe,
DO NOT DRAG AND DROP to download the script, it won't work for FRST (Right click on the attachment link (not the normal left click) and from the menu choose Save As or Save Link as.)
The script tells FRST what to do.
Start FRST that is on the desktop When the tool opens click Yes to disclaimer. (if it still does)
Press the Fix button just once and wait.
The tool will make a log on the Desktop (Fixlog.txt) please post it to your reply (attach or paste)
Quads
|
|
|
viknok
Aug 15, 2014 15:25:39 GMT -8
Post by lemony on Aug 15, 2014 15:25:39 GMT -8
Is this file supposed to show as 1175.htm when I download it?
|
|
|
viknok
Aug 15, 2014 15:31:06 GMT -8
Post by lemony on Aug 15, 2014 15:31:06 GMT -8
I must have did something wrong there, correctly downloaded the fixlist and here is the log from FRST.
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
viknok
Aug 15, 2014 15:55:31 GMT -8
Post by Quads on Aug 15, 2014 15:55:31 GMT -8
Now start FRST and run a scan so that it creates a new log (FRST.txt) to make sure the Windows file comes back as legit and the 2 services are showing as OK, actually may not now list at all, were only listed due to the not being signed.
Quads
|
|
|
viknok
Aug 15, 2014 16:21:35 GMT -8
Post by lemony on Aug 15, 2014 16:21:35 GMT -8
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
viknok
Aug 15, 2014 16:43:32 GMT -8
Post by Quads on Aug 15, 2014 16:43:32 GMT -8
In the Control panel => Programs => Uninstall Uninstall in the list of programs "ESET Online Scanner" = ESET Online Scanner v3 Then Tools and Quarantines we used to be removed Please download DelFix by Xplode to your Desktop. toolslib.net/downloads/viewdownload/2-delfix/Double-click to run the program; Note: Windows Vista/7/8 users right-click and choose Run as administrator Make sure the Remove Disinfection tools is ticked / selected in the list Click RUNA log will be opened after the operation is finished Copy and Paste it in your next reply Quads
|
|
|
viknok
Aug 15, 2014 17:04:06 GMT -8
Post by lemony on Aug 15, 2014 17:04:06 GMT -8
I can't seem to access the toolslib.net site. My browser says: 'This page can't be displayed' in big blue letters.
|
|
Quads
Malware Removalists
In New Zealand
Posts: 9,387
|
viknok
Aug 15, 2014 18:00:08 GMT -8
Post by Quads on Aug 15, 2014 18:00:08 GMT -8
I got there eventually took awhile so there may be a problem (that may be in the process of being fixed) at the server end.
Quads
|
|