| Windows 7: Totally lost - win32/olmarik.ajl trojan |
03 Feb 2011
|
#1 | | Windows 7 Profesional x64 |
Totally lost - win32/olmarik.ajl trojan I'm sorry if I posted this in the wrong forum,
but this one seemed most appropriate to post this...
I wouldn't usually go to forums to ask a virus-related problem,
but I have NO CLUE what to do anymore,
Everytime my PC boots NOD32 gives me a message that there's a olmarik.ajl trojan in my MBR of Phsyical Drive 1 (Which is my C: drive)
I've tried some things,
Scanned with NOD32 & SPYBOT,
but since it's in MBR that didn't help,
I did a MBR Fix by dooing bootrec /fixmbr in win recovery.
When that didn't work I flashed my bios,
in case it was hiding in there, which is probably isn't, but not tried is.. you know.
After that STILL not working, I just formatted my C drive since it was supposed to be there (I have all my other things in different partitions, cuz' I expected something like this to happen eventually)
and after that I still got the same error for the same drive, and I repeated all again except the format.
So please,
anyone has any idea what to do? | My System Specs |
| System Manufacturer/Model Number Self-Assembled OS Windows 7 Profesional x64 CPU AMD Phenom 9950 B.E. Motherboard ASROCK A770DE Memory GeIl 4GB DDR3 Graphics Card XFX GTX 275 XXX OC Sound Card Creative X-Fi Xtreme Gamer Monitor(s) Displays Samsung Syncmaster 2243 NWX PSU CoolerMaster Case Antec Nine Hundred Two Cooling CoolerMaster |
03 Feb 2011
|
#2 | | Windows 7 Ultimate SP1 (64-bit) Valencia, VE. |
Hello there, i've read that using Dr. Web Cure It will take care of that virus (although you have to run it in Safe Mode, by pressing F8 on BIOS screen), i'd put the link here but it's a Latin American article, so it's in spanish.
Here's the link for Dr. Web CureIt: http://www.freedrweb.com/download+cureit/gr/?lng=en
Install it, reboot into Safe Mode with Networking, and do a Full Scan with it
Report back after the scan with the results, please.
Here's another article about this: Win32/Olmarik.AJL Trojan - Safer-Networking Forums
Apparently is not a simple and easy to kill virus | My System Specs | | System Manufacturer/Model Number Built by Myself OS Windows 7 Ultimate SP1 (64-bit) CPU Intel Core i5-2310 @ 2.90GHz Motherboard MSI PH67A-C43 (B3) Memory Kingston KVR 16GB (4 x 4GB) DDR3 @ 1333MHz Graphics Card PNY XLR8 GTX 560 Ti 1GB GDDR5 Sound Card Realtek HD Audio (ALC 892) Monitor(s) Displays LG W2353V-PF Screen Resolution 1920 x 1080 (HDMI) Keyboard Logitech MK320 Wireless Keyboard Mouse Logitech MK320 Wireless Mouse PSU Thermaltake Toughpower XT 575w Modular 80 PLUS Bronze Case Cooler Master CM Storm Enforcer Cooling Thermaltake Frío, CM MegaFlow 200mm (2), CM 120mm (1) Hard Drives Samsung HD502HJ (500GB), ExcelStor J8080S (80GB) Internet Speed dl: 1024kbps, ul: 512kbps |
03 Feb 2011
|
#3 | | Windows 7 Profesional x64 |
Thanks a LOT Punisher, that solved that issue.
Now another issue is that my ping is still 512ms instead of my usual 16,
any tips on that? | My System Specs | | System Manufacturer/Model Number Self-Assembled OS Windows 7 Profesional x64 CPU AMD Phenom 9950 B.E. Motherboard ASROCK A770DE Memory GeIl 4GB DDR3 Graphics Card XFX GTX 275 XXX OC Sound Card Creative X-Fi Xtreme Gamer Monitor(s) Displays Samsung Syncmaster 2243 NWX PSU CoolerMaster Case Antec Nine Hundred Two Cooling CoolerMaster |
03 Feb 2011
|
#4 | | Windows 7 Ultimate SP1 (64-bit) Valencia, VE. |
That could be a simple issue from your ISP. i don't think the virus has something to do with your 512ms ping | My System Specs | | System Manufacturer/Model Number Built by Myself OS Windows 7 Ultimate SP1 (64-bit) CPU Intel Core i5-2310 @ 2.90GHz Motherboard MSI PH67A-C43 (B3) Memory Kingston KVR 16GB (4 x 4GB) DDR3 @ 1333MHz Graphics Card PNY XLR8 GTX 560 Ti 1GB GDDR5 Sound Card Realtek HD Audio (ALC 892) Monitor(s) Displays LG W2353V-PF Screen Resolution 1920 x 1080 (HDMI) Keyboard Logitech MK320 Wireless Keyboard Mouse Logitech MK320 Wireless Mouse PSU Thermaltake Toughpower XT 575w Modular 80 PLUS Bronze Case Cooler Master CM Storm Enforcer Cooling Thermaltake Frío, CM MegaFlow 200mm (2), CM 120mm (1) Hard Drives Samsung HD502HJ (500GB), ExcelStor J8080S (80GB) Internet Speed dl: 1024kbps, ul: 512kbps |
04 Feb 2011
|
#5 | | Windows 7 Profesional x64 |
My laptop still has ~15 ping,
and it started to go up to 512ms ping after I got the message of the virus =X | My System Specs | | System Manufacturer/Model Number Self-Assembled OS Windows 7 Profesional x64 CPU AMD Phenom 9950 B.E. Motherboard ASROCK A770DE Memory GeIl 4GB DDR3 Graphics Card XFX GTX 275 XXX OC Sound Card Creative X-Fi Xtreme Gamer Monitor(s) Displays Samsung Syncmaster 2243 NWX PSU CoolerMaster Case Antec Nine Hundred Two Cooling CoolerMaster |
04 Feb 2011
|
#6 | | Windows 7 Ultimate SP1 (64-bit) Valencia, VE. |
Well, you could try to do a Winsock Reset. But i'm not sure if that could fix the problem.
I created a Batch File for you, if you don't feel safe about it.
Here is its content: Quote: ipconfig /release
pause
ipconfig /flushdns
pause
ipconfig /renew
pause
netsh winsock reset catalog
pause
netsh int ip reset reset.log hit
pause That will Repair your winsock entries and could help with the problem
EDIT: Download the file, go to the path where the file was downloaded, right click it, go to properties and click "Unblock" on the bottom. Apply and accept, then right click it again and "Run as Administrator" | My System Specs | | System Manufacturer/Model Number Built by Myself OS Windows 7 Ultimate SP1 (64-bit) CPU Intel Core i5-2310 @ 2.90GHz Motherboard MSI PH67A-C43 (B3) Memory Kingston KVR 16GB (4 x 4GB) DDR3 @ 1333MHz Graphics Card PNY XLR8 GTX 560 Ti 1GB GDDR5 Sound Card Realtek HD Audio (ALC 892) Monitor(s) Displays LG W2353V-PF Screen Resolution 1920 x 1080 (HDMI) Keyboard Logitech MK320 Wireless Keyboard Mouse Logitech MK320 Wireless Mouse PSU Thermaltake Toughpower XT 575w Modular 80 PLUS Bronze Case Cooler Master CM Storm Enforcer Cooling Thermaltake Frío, CM MegaFlow 200mm (2), CM 120mm (1) Hard Drives Samsung HD502HJ (500GB), ExcelStor J8080S (80GB) Internet Speed dl: 1024kbps, ul: 512kbps |
05 Feb 2011
|
#7 | | Windows 7 Ultimate 32bit SP1 |
olmarik.ajl trojan is not that easy to get rid of. It is a "Backdoor Trojan" with a rootkit.
My advice would be to wipe and do a clean install. Stay away from cracks and keygens | My System Specs | | System Manufacturer/Model Number Bruce ... somewhere in his 40's OS Windows 7 Ultimate 32bit SP1 CPU Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz Motherboard INTEL/D975XBX2 Memory 4 GB Graphics Card ATI Radeon HD 2600 Pro Monitor(s) Displays Samsung SyncMaster 914v Screen Resolution 1280 x 1024 Keyboard Standard PS/2 Keyboard Mouse Microsoft PS/2 Mouse PSU Rocketfish 700 W Case G.Skill Gigabyte Chassis Hard Drives 2/500GB each ... ST3500630AS ATA Device.
One is not connected Internet Speed DSL Antivirus Avira Internet Security Browser IE 9 Other Info ATI HDMI Audio |
05 Feb 2011
|
#8 | | Windows 7 Ultimate SP1 (64-bit) Valencia, VE. |

Quote: Originally Posted by Jacee olmarik.ajl trojan is not that easy to get rid of. It is a "Backdoor Trojan" with a rootkit.
My advice would be to wipe and do a clean install. Stay away from cracks and keygens  That's what i though Jacee, but i didn't want to suggest that because it'd be like the "last resort" but yeah, i read that olmarik.ajl trojan wasn't an easy virus..
BTW, i've never heard that virus before, how could you get infected by it? | My System Specs | | System Manufacturer/Model Number Built by Myself OS Windows 7 Ultimate SP1 (64-bit) CPU Intel Core i5-2310 @ 2.90GHz Motherboard MSI PH67A-C43 (B3) Memory Kingston KVR 16GB (4 x 4GB) DDR3 @ 1333MHz Graphics Card PNY XLR8 GTX 560 Ti 1GB GDDR5 Sound Card Realtek HD Audio (ALC 892) Monitor(s) Displays LG W2353V-PF Screen Resolution 1920 x 1080 (HDMI) Keyboard Logitech MK320 Wireless Keyboard Mouse Logitech MK320 Wireless Mouse PSU Thermaltake Toughpower XT 575w Modular 80 PLUS Bronze Case Cooler Master CM Storm Enforcer Cooling Thermaltake Frío, CM MegaFlow 200mm (2), CM 120mm (1) Hard Drives Samsung HD502HJ (500GB), ExcelStor J8080S (80GB) Internet Speed dl: 1024kbps, ul: 512kbps |
05 Feb 2011
|
#9 | | Windows 7 Ultimate 32bit SP1 |
Many ways to get infected!
1. Using a peer-to-peer (P2P) application that allows its users to join together in a network via the Internet and share files from each other's hard drives.
2. Using an infected flash drive
3. Clicking on unknown links
4. Downloadung cracks and keygens | My System Specs | | System Manufacturer/Model Number Bruce ... somewhere in his 40's OS Windows 7 Ultimate 32bit SP1 CPU Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz Motherboard INTEL/D975XBX2 Memory 4 GB Graphics Card ATI Radeon HD 2600 Pro Monitor(s) Displays Samsung SyncMaster 914v Screen Resolution 1280 x 1024 Keyboard Standard PS/2 Keyboard Mouse Microsoft PS/2 Mouse PSU Rocketfish 700 W Case G.Skill Gigabyte Chassis Hard Drives 2/500GB each ... ST3500630AS ATA Device.
One is not connected Internet Speed DSL Antivirus Avira Internet Security Browser IE 9 Other Info ATI HDMI Audio |
05 Feb 2011
|
#10 | | Windows 7 Ultimate SP1 (64-bit) Valencia, VE. |
Ohh didn't know that hehe.. that's exactly why i have "autoruns" disabled, a good antivirus (NOD32, good for my taste  ), Malwarebytes' and a LOT of common sense  that hasn't failed me since a really long time..
I'll be aware and also tell my little sister not to mess with unknown links
Thanks, Jacee | My System Specs | | System Manufacturer/Model Number Built by Myself OS Windows 7 Ultimate SP1 (64-bit) CPU Intel Core i5-2310 @ 2.90GHz Motherboard MSI PH67A-C43 (B3) Memory Kingston KVR 16GB (4 x 4GB) DDR3 @ 1333MHz Graphics Card PNY XLR8 GTX 560 Ti 1GB GDDR5 Sound Card Realtek HD Audio (ALC 892) Monitor(s) Displays LG W2353V-PF Screen Resolution 1920 x 1080 (HDMI) Keyboard Logitech MK320 Wireless Keyboard Mouse Logitech MK320 Wireless Mouse PSU Thermaltake Toughpower XT 575w Modular 80 PLUS Bronze Case Cooler Master CM Storm Enforcer Cooling Thermaltake Frío, CM MegaFlow 200mm (2), CM 120mm (1) Hard Drives Samsung HD502HJ (500GB), ExcelStor J8080S (80GB) Internet Speed dl: 1024kbps, ul: 512kbps Totally lost - win32/olmarik.ajl trojan problems? All times are GMT -5. The time now is 04:52 AM. | |