problem about program in startup

Page 2 of 3 FirstFirst 123 LastLast

  1. Posts : 24
    windows 7
    Thread Starter
       #11

    for my country everything doesn't do


    WindowsStar said:
    I have never seen these: 0A6A7.exe.exe , 0A6E6.exe.exe , 0A008.exe.exe , 0A197.exe.exe before. The naming looks like a BAD virus. I would build a boot CD off another known clean machine and boot off the CD and do a complete virus scan before doing anything else.

    Downloadable Computer Repair CDs | Technibble
    http://www.microsoft.com/security_essentials/
    Malwarebytes
    in website microsoft this warning appear "You appear to be in a country or region where Microsoft Security Essentials is not available. Thank you for your interest in Microsoft Security Essentials." thx for your rep
      My Computer


  2. Posts : 3,300
    Win7 Home Premium 64x
       #12

    Did you try Malwarebytes? The free version can scan your comp and probably will correct it. I would also so as soon as you install AV, update it so it has the latest virus definitions. This is ensure you find all the stuff on your comp.

    Also, MS has support for Iraq: Microsoft Iraq Home Page
    MSE is listed in the "Using your computer" section
    There might be another reason why you are getting this message. If you are behind a proxy or firewall and MS is not able to see your computer or ip address, then this might be messing it up. Try disabling proxy or allowing access through firewall.

    another thing to check would be in Control Panel > Regional Settings Make sure your time zone is set to your region correctly.
      My Computer


  3. Posts : 24
    windows 7
    Thread Starter
       #13

    Corrine said:
    Hi, sabajordan.

    Indeed, those random file names are indicative of an infection. With Windows 7, you may want to first try System Restore to a point prior to when those files started appearing. Windows 7 has a much more robust System Restore than Windows XP and Windows Vista. If that doesn't work, I suggest an on-line scan. Since you have already scanned with NOD32, try F-Secure :

    Go here and run an on-line scan with the F-Secure scanner .

    • Use IE (Internet Explorer), accept the license terms, and allow the Active-X controls to load.
    • Click Full System Scan and allow the components to download and the scan to complete.
    • If malware is found during the scan, check Submit samples to F-Secure and Automatic cleaning.
    I suggest following that with an MBAM scan:

    Please download Malwarebytes' Anti-Malware to your desktop.


    • Double-click mbam-setup.exe and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, be sure Quick scan is selected, then click Scan.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Be sure that everything is checked, EXCEPT items in System Restore as shown in this sample:
    • Click Remove Selected.


    Let us know how you make out.
    this software sucessed to find this (C:\Windows\System32\{1E465794-1F7C-470d-A1C1-845C35A1D351}.dll) i don't know what do i do now ? plz help me and tell me what 's this is it trojan ? how can i remove this?
    ps: i can't update software the latest it's signature is 29/4/2010 i hope it isn't important
      My Computer


  4. Posts : 24
    windows 7
    Thread Starter
       #14

    Thorsen said:
    Did you try Malwarebytes? The free version can scan your comp and probably will correct it. I would also so as soon as you install AV, update it so it has the latest virus definitions. This is ensure you find all the stuff on your comp.

    Also, MS has support for Iraq: Microsoft Iraq Home Page
    MSE is listed in the "Using your computer" section
    There might be another reason why you are getting this message. If you are behind a proxy or firewall and MS is not able to see your computer or ip address, then this might be messing it up. Try disabling proxy or allowing access through firewall.

    another thing to check would be in Control Panel > Regional Settings Make sure your time zone is set to your region correctly.
    thx for your piteous but i 'm living in IRAN and no iraq many years ago iraq attached to iran and now it's seperate region anyway i download process monitor and active it but i can't save results in txt file and the software saved to xml & PML & csv so i can't send any information but malware found result and i tell about it in other post if you help me i 'm very gartefull
      My Computer


  5. Posts : 2,303
    Windows 7 & Windows Vista Ultimate
       #15

    sabajordan said:
    this software sucessed to find this (C:\Windows\System32\{1E465794-1F7C-470d-A1C1-845C35A1D351}.dll) i don't know what do i do now ? plz help me and tell me what 's this is it trojan ? how can i remove this?
    ps: i can't update software the latest it's signature is 29/4/2010 i hope it isn't important
    Hi, sabajordan.

    Yes, that is a trojan agent.

    When you say you can't update the software to the most recent signature, do you mean MBAM (Malwarebytes)? If that is what you mean, please do the following to get the latest signature:

    Download the latest MBAM update from here http://www.gt500.org/malwarebytes/database.jsp and manually install it. After updating, run a new scan. When the results appear, be sure that everything is checked and then click Remove Selected.

    When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be found at C:\Users\UserName\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt on Windows Vista and Windows 7.

    Please post the contents of that file in your next reply.
      My Computer


  6. Posts : 24
    windows 7
    Thread Starter
       #16

    Corrine said:
    sabajordan said:
    this software sucessed to find this (C:\Windows\System32\{1E465794-1F7C-470d-A1C1-845C35A1D351}.dll) i don't know what do i do now ? plz help me and tell me what 's this is it trojan ? how can i remove this?
    ps: i can't update software the latest it's signature is 29/4/2010 i hope it isn't important
    Hi, sabajordan.

    Yes, that is a trojan agent.

    When you say you can't update the software to the most recent signature, do you mean MBAM (Malwarebytes)? If that is what you mean, please do the following to get the latest signature:

    Download the latest MBAM update from here http://www.gt500.org/malwarebytes/database.jsp and manually install it. After updating, run a new scan. When the results appear, be sure that everything is checked and then click Remove Selected.

    When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be found at C:\Users\UserName\AppData\Roaming\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt on Windows Vista and Windows 7.

    Please post the contents of that file in your next reply.
    thx for your help you want contents of this file & i show these contents :
    Malwarebytes' Anti-Malware 1.46
    www.malwarebytes.org
    Database version: 4189
    Windows 6.1.7600
    Internet Explorer 8.0.7600.16385
    06/12/2010 03:03:50 ?.?
    mbam-log-2010-06-12 (15-03-50).txt
    Scan type: Quick scan
    Objects scanned: 125671
    Time elapsed: 12 minute(s), 53 second(s)
    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 1
    Memory Processes Infected:
    (No malicious items detected)
    Memory Modules Infected:
    (No malicious items detected)
    Registry Keys Infected:
    (No malicious items detected)
    Registry Values Infected:
    (No malicious items detected)
    Registry Data Items Infected:
    (No malicious items detected)
    Folders Infected:
    (No malicious items detected)
    Files Infected:
    C:\Windows\System32\{1E465794-1F7C-470d-A1C1-845C35A1D351}.dll (Trojan.Agent) -> Delete on reboot.
    i hope those files in my startup created by this trojan & i hope with delete this trojan my problem disapper
      My Computer


  7. Posts : 2,303
    Windows 7 & Windows Vista Ultimate
       #17

    Hi, sabajordan.

    After restarting your computer, I suggest you clear temp files. This simple tool does a nice job. With Windows 7, right-click and run as Administrator.

    Please download ATF Cleaner by Atribune from ATF-Cleaner.exe - www.atribune.org . Save it to your Desktop.

    Run ATF Cleaner
    • Right-click ATF-Cleaner.exe and select Run as Administrator.
    • Click Select All found at the bottom of the list.
    • Click the Empty Selected button.
    • Click Exit on the Main menu to close the program.
    • Shutdown/restart the computer.



    Following that, I suggest you check that ESET NOD32 is updated and run a full system scan.

    Let us know how you make out.
      My Computer


  8. Posts : 24
    windows 7
    Thread Starter
       #18

    thx


    Corrine said:
    Hi, sabajordan.

    After restarting your computer, I suggest you clear temp files. This simple tool does a nice job. With Windows 7, right-click and run as Administrator.

    Please download ATF Cleaner by Atribune from ATF-Cleaner.exe - www.atribune.org . Save it to your Desktop.


    Run ATF Cleaner
    • Right-click ATF-Cleaner.exe and select Run as Administrator.
    • Click Select All found at the bottom of the list.
    • Click the Empty Selected button.
    • Click Exit on the Main menu to close the program.
    • Shutdown/restart the computer.


    Following that, I suggest you check that ESET NOD32 is updated and run a full system scan.

    Let us know how you make out.
    hi
    i did your suggest and thankyou if you have time plz other post i wrote i 'm studing class MCSA and my teacher wanted that install VMware but i can't install it if you can help me i 'm gratful from you problem to install vmware
      My Computer


  9. Posts : 3,300
    Win7 Home Premium 64x
       #19

    Did Corrine's instructions solve problem? clean up your computer completely?
      My Computer


  10. Posts : 24
    windows 7
    Thread Starter
       #20

    Thorsen said:
    Did Corrine's instructions solve problem? clean up your computer completely?
    i don't know exactly .everything is ok now & i think i 'm free from preproblem
      My Computer


 
Page 2 of 3 FirstFirst 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 12:30.
Find Us