 |
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows 7. The Windows 7 forum also covers news and updates and has an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.
Windows 7 - Anti-Virus G-Data 2011 TotalCare Hangs Please Help |
01-28-2012
|
#1 | | |
Anti-Virus G-Data 2011 TotalCare Hangs Please Help My pc is scanning virusses with Gdata and stops at 99% it finds virusses but dont remove its i have already run other software's like maleware bytes and superanti spyware they are working only g-data stops what can i do please help me the virusses called i have is win32:Sinowal-LJ
Virus: Exploit.Java.CVE-2010-0840.L
Adres: fgex.secureintl.com
Virus: JS:ScriptIP-inf [Trj] (Engine B)
i still have them on my pc i cant remove when my gdata stops automaticley please help me thanks
| My System Specs | | |
01-28-2012
|
#2 | | Windows 7 Ultimate 64bit SP1 |
Hi.
Remove Gdata from your system,download and install Microsoft Security Essentials with windows firewall enable. Update Microsoft Security Essentials and run full scan.
Restart and boot in Safe Mode with networking.
Start,update malwarebytes and run full scan in safe mode.
Start,update superantispyware and run full scan in safe mode.
Read also this Good and Free system security combination. | My System Specs | | System Manufacturer/Model Number Custom Built by me. OS Windows 7 Ultimate 64bit SP1 CPU Intel Core 2 Quad Q6600 Motherboard Gigabyte GA-X38-DS4 Memory 2X2GB DDR2 PC6400 800MHZ DUAL CHANNEL Graphics Card XFX RADEON HD 6850 1GB GDDR5 Sound Card 2/4/5.1/7.1-channel Realtek High Definition Monitor(s) Displays Samsung LE40A656F1 1080p 100Hz LCD HD TV 50,000:1 Screen Resolution 1366x768 in Desktop,1920x1080p in gaming and video Keyboard Wireless Logitech LX710 Mouse Logitech Wireless Gaming Mouse G700 PSU THERMALTAKE W0229 TOUGHPOWER XT 750W Case A-Case Twin Engine BB Cooling 3 x thermaltake smart case fan II + 1 arctic cooling fan Hard Drives C:\WD VelociRaptor 150 GB,10,000 RPM
E:\WESTERN DIGITAL WD15EADS 1.5TB CAVIAR GREEN SATA2 F:\WESTERN DIGITAL WD15EADS 1.5TB CAVIAR GREEN SATA2 Internet Speed ADSL 12000 plus Other Info Mouse Logitech G700,with 13 buttons who needs keyboard in RPG?
D:\Sony high speed sata Dvd Rewriter
Logitech Cordless Rumblepad 2 |
01-28-2012
|
#3 | | Windows 7 Ultimate 32bit SP1 |
Quote: Description Win32/Sinowal aka "Torpig" is a family of bot controlled Trojan designed to steal sensitive information including online banking credentials. It transmits harvested data to a remote server via HTTP communication channel. Win32/Sinowal is distributed and installed by the Win32/Mebroot botnet. This is a "Backdoor Trojan" ...
These are the most dangerous, and most widespread, type of Trojan.
Backdoor Trojans provide the author or ‘master’ of the Trojan with remote ‘administration’ of victim machines. Unlike legitimate remote administration utilities, they install, launch and run invisibly, without the consent or knowledge of the user. Once installed, backdoor Trojans can be instructed to send, receive, execute and delete files, harvest confidential data from the computer, log activity on the computer and more.
If your computer was used for online banking or has credit card information on it, all passwords should be changed immediately to include those used for email, eBay and forums.
You should consider them to be compromised.
They should be changed by using a different computer and not the infected one, if not an attacker may get the new passwords and transaction information.
Banking and credit card institutions should be notified of the possible security breech.
More info can be found below:
How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud? How to report ID theft, fraud, drive-by installs, hijacking and malware? Security | DSLReports.com, ISP Information
When should I re-format? How should I reinstall? When should I re-format? How should I reinstall? Security | DSLReports.com, ISP Information | My System Specs | | System Manufacturer/Model Number Bruce ... somewhere in his 40's OS Windows 7 Ultimate 32bit SP1 CPU Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz Motherboard INTEL/D975XBX2 Memory 4 GB Graphics Card ATI Radeon HD 2600 Pro Monitor(s) Displays Samsung SyncMaster 914v Screen Resolution 1280 x 1024 Keyboard Standard PS/2 Keyboard Mouse Microsoft PS/2 Mouse PSU Rocketfish 700 W Case G.Skill Gigabyte Chassis Hard Drives 2/500GB each ... ST3500630AS ATA Device.
One is not connected Internet Speed DSL Other Info ATI HDMI Audio |
01-30-2012
|
#4 | | |

Quote: Originally Posted by panais Hi.
Remove Gdata from your system,download and install Microsoft Security Essentials with windows firewall enable. Update Microsoft Security Essentials and run full scan.
Restart and boot in Safe Mode with networking.
Start,update malwarebytes and run full scan in safe mode.
Start,update superantispyware and run full scan in safe mode.
Read also this Good and Free system security combination. Hi i removed my gdata and download microsoft security and did a full scan on normal mode and safe mode with networking notting was found.
then i reboot pc i start malwarebytes and superantspyware in safemode notting was found.
im not sure if the virus is gone i checked my system logfile and ther are alot of wrong stuffes that i not had before after the trojan came like (Ntfs) (Microsoft-Windows-Kernel-Power)
i also check ur link i instaled wot thanks alot for your help what can i do more?
i mean i bought gdata and i have a lisence for a year its a award winner of the best antivirus progams 2011 | My System Specs | | |
01-30-2012
|
#5 | | |

Quote: Originally Posted by Jacee Quote: Description Win32/Sinowal aka "Torpig" is a family of bot controlled Trojan designed to steal sensitive information including online banking credentials. It transmits harvested data to a remote server via HTTP communication channel. Win32/Sinowal is distributed and installed by the Win32/Mebroot botnet. This is a "Backdoor Trojan" ...
These are the most dangerous, and most widespread, type of Trojan.
Backdoor Trojans provide the author or ‘master’ of the Trojan with remote ‘administration’ of victim machines. Unlike legitimate remote administration utilities, they install, launch and run invisibly, without the consent or knowledge of the user. Once installed, backdoor Trojans can be instructed to send, receive, execute and delete files, harvest confidential data from the computer, log activity on the computer and more.
If your computer was used for online banking or has credit card information on it, all passwords should be changed immediately to include those used for email, eBay and forums.
You should consider them to be compromised.
They should be changed by using a different computer and not the infected one, if not an attacker may get the new passwords and transaction information.
Banking and credit card institutions should be notified of the possible security breech.
More info can be found below:
How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud? How to report ID theft, fraud, drive-by installs, hijacking and malware? Security | DSLReports.com, ISP Information
When should I re-format? How should I reinstall? When should I re-format? How should I reinstall? Security | DSLReports.com, ISP Information HI thanks alot for the info
but i dont even have a bankpass or a creditcard or a paypal so this trojan came from a site? | My System Specs | | |
01-30-2012
|
#6 | | Windows 7 Ultimate 32bit SP1 |
Possibly a drive by script ...
Please download TFC by Old Timer TFC - Temp File Cleaner by OldTimer - Geeks to Go Forums and save it to your desktop. Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista/Windows 7 right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion. Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean. Quote: TFC (Temp File Cleaner) will clear out all temp folders for all user accounts (temp, IE temp, java, FF, Opera, Chrome, Safari), including Administrator, All Users, LocalService, NetworkService, and any other accounts in the user folder. It also cleans out the %systemroot%\temp folder and checks for .tmp files in the %systemdrive% root folder, %systemroot%, and the system32 folder (both 32bit and 64bit on 64bit OSs). It shows the amount removed for each location found (in bytes) and the total removed (in MB). Before running, it will stop Explorer and all other running apps. When finished, if a reboot is required the user must reboot to finish clearing any in-use temp files. Next, Please follow these steps to remove older version Java components and update. Updating Java: - Download the latest version of Java Runtime Environment (JRE) 7.
Java SE Downloads - Scroll down to where it says "Java Runtime Environment (JRE) 7u2 allows end-users to run Java applications".
- Click the "Download" button to the right.
- Check the box that says: "Accept License Agreement".
- The page will refresh.
- Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
- Close any programs you may have running - especially your web browser.
- Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
- Check any item with Java Runtime Environment (JRE or J2SE) in the name.
- Click the Remove or Change/Remove button.
- Repeat as many times as necessary to remove each Java versions.
- Reboot your computer once all Java components are removed.
- Then from your desktop double-click on jre-7u2-windows-i586-p.exe to install the newest version.
flush your DNS’s cache
Most DNS clients cache the results of name resolution requests. This speeds up name resolution if multiple lookups are done to the same address, such as is common when browsing the web.
Sometimes a bad DNS entry will be cached and you will need to either flush the DNS cache to get rid of it, or wait up to 24 hours for it to be dropped from the cache automatically.
Right click on Command Prompt and click to 'Run as Administrator'.
Copy/paste ipconfig /flushdns and press the 'enter' key
Now I'd like you to scan your machine with ESET OnlineScan- Hold down Control and click on the following link to open ESET OnlineScan in a new window.
ESET OnlineScan - Click the
button. - For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
- Click on
to download the ESET Smart Installer. Save it to your desktop. - Double click on the
icon on your desktop.
- Check
 - Click the
button. - Accept any security warnings from your browser.
- Check
 - Push the Start button.
- ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
- When the scan completes, push
 - Push
, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply. - Push the
button. - Push
 | My System Specs | | System Manufacturer/Model Number Bruce ... somewhere in his 40's OS Windows 7 Ultimate 32bit SP1 CPU Intel(R) Core(TM)2 Quad CPU @ 2.40GHz, 2400 MHz Motherboard INTEL/D975XBX2 Memory 4 GB Graphics Card ATI Radeon HD 2600 Pro Monitor(s) Displays Samsung SyncMaster 914v Screen Resolution 1280 x 1024 Keyboard Standard PS/2 Keyboard Mouse Microsoft PS/2 Mouse PSU Rocketfish 700 W Case G.Skill Gigabyte Chassis Hard Drives 2/500GB each ... ST3500630AS ATA Device.
One is not connected Internet Speed DSL Other Info ATI HDMI Audio Anti-Virus G-Data 2011 TotalCare Hangs Please Help problems? All times are GMT -5. The time now is 01:21 AM. |  |