Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Help to make sure trojan virus is really gone

07 Jun 2013   #1
hkfish

Windows 7 Professional, 64 bit
 
 
Help to make sure trojan virus is really gone

Hi,
I got infected with the trojan downloader dofoil virus and removed it with malwarebytes. But I heard that they can leave other programs behind that do more damage so I'm not comfortable to leave it at that.
Also I was blocked by spamhaus and don't fancy being blocked again.
I understand there are other things I can check to make sure this virus hasn't left any friends behind, if someone can take me through some processes that would be excellent.
Karen


My System SpecsSystem Spec
.
08 Jun 2013   #2
cottonball

Windows 7 Home Premium
 
 

hkfish,

Please go to the Farbar Recovery Scan Tool Download
Select the 64-bit version.
Save it to your Desktop.
Double-click the downloaded file to run it.

When the tool opens click Yes to the disclaimer.

Press the Scan button.

FRST64 makes a log (FRST.txt) in the same directory from which the tool is run (Desktop).

Please provide the FRST.txt in your reply. <<---

The first time the tool is run, it also makes another log: Addition.txt
Also post the: Addition.txt in your reply. <<---


Also download RogueKiller:
http://tigzy.geekstogo.com/roguekiller.php

Select the x64 version.
Click the applicable button to download.
Save to the Desktop.


Close all windows and browsers.
Right-click and select: Run as Administrator

At the program console, wait for the prescan to finish. (Under Status, it says: Prescan finished.)

Press: SCAN

When done, a report opens on the Desktop: RKreport.txt

Please provide the RKreport.txt (Mode: Scan) in your reply.

My System SpecsSystem Spec
08 Jun 2013   #3
hkfish

Windows 7 Professional, 64 bit
 
 

Hi cottonball,
Here are the results attached. I hope it isn't serious..


Attached Files
File Type: txt FRST.txt (26.2 KB, 4 views)
File Type: txt Addition.txt (15.1 KB, 3 views)
File Type: txt RKreport[1]_S_06082013_02d1603.txt (1.9 KB, 4 views)
My System SpecsSystem Spec
.

08 Jun 2013   #4
cottonball

Windows 7 Home Premium
 
 

So far, so good.

Let's run an online scanner...
This may take a while, so run the following when you can be home...

This Scanner is implemented as an ActiveX control, so it is best run on Internet Explorer.
Right click the IE shortcut and select: Run as Administrator

Next, download: Free Online Virus Scanner | ESET

On the ESET website, click on: Run ESET Online Scanner
Click: Start

When asked, allow the add-on to be installed
Click: Start again

On the next prompt, Computer Scan Settings, check: Remove found threats
Next, click on: Advanced Settings

Make sure these options are checked:
  • Scan for potentially unwanted applications
  • Scan for potentially unsafe applications
  • Enable Anti-Stealth Technology
Click: Scan

When the scan is completed, if threats are found, in the Scan Results prompt:
  • Click on: List of threats found
  • Click on: Export to text file
  • Save to the Desktop and name it ESET Scan Results
  • Click on: Back
  • Place a check on: Uninstall application on close
  • Click on: Finish, and close the program.
Please provide the ESET report in your reply to determine if any further action is necessary.
My System SpecsSystem Spec
08 Jun 2013   #5
hkfish

Windows 7 Professional, 64 bit
 
 

Oh no soooo many viruses getting past all my virus checkers...

Those scanner tools are fantastic though aren't they? Now I know why I kept getting DHL emails popping up all the time - because I've got the DHL virus as well.


Attached Files
File Type: txt ESET Scan Results.txt (1.2 KB, 6 views)
My System SpecsSystem Spec
09 Jun 2013   #6
cottonball

Windows 7 Home Premium
 
 

These are 2 programs that get rid of Adware/Junkware and will help your cleanup effort:


Please go to the AdwCleaner Download
Save to the Desktop.


Close all open programs.
To run the program, right-click AdwCleaner.exe and select: Run as Administrator


Click on Delete and confirm the prompt.


After the program finishes, the computer is restarted.

A text file report opens after the restart.

Please attach the content of the C:\AdwCleaner[S1].txt in your reply.



Also use the Junkware Removal Tool Download
Save to the Desktop.

Make sure you temporarily disable your AntiVirus, Firewall, and any other AntiSpyware applications.
These programs may interfere with the running of JRT.
Info: How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs - Security Mini-Guides


Right-click JRT.exe and select: Run as Administrator

The tool opens and starts scanning the system. Please be patient as this can take a while...


When done, a report, JRT.txt is saved on the Desktop.

Please post the contents of JRT.txt in your reply.


Last, letís check the Security status with the following...

Download Security Check:
http://screen317.spywareinfoforum.org/
Save to your Desktop.

Double-click SecurityCheck.exe

Follow the onscreen instructions inside the black box.

When done, a Notepad report opens automatically, called: checkup.txt

Please post the checkup.txt in your reply.

(Please do not take any corrective actions!)
My System SpecsSystem Spec
09 Jun 2013   #7
hkfish

Windows 7 Professional, 64 bit
 
 

done! Here are the 3 file attachments. The last check didn't run as my op sys isn't supported.


Attached Files
File Type: txt AdwCleaner[S1].txt (1.1 KB, 1 views)
File Type: txt JRT.txt (930 Bytes, 1 views)
File Type: txt checkup.txt (41 Bytes, 3 views)
My System SpecsSystem Spec
09 Jun 2013   #8
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

The Security Check should work on 32-bit and 64-bit Win7
My System SpecsSystem Spec
09 Jun 2013   #9
VistaKing

Windows 7 Ultimate 32-Bit & Windows 7 Ultimate 64-Bit
 
 

Try running Security check in Safe Mode

Restart the PC while the PC is booting up tap on the F8 key on your Keyboard . You should get to the Advanced Boot Options screen . Inside there press the down arrow until you get to Safe Mode and press <enter> key . You will see a list of text scrolling down the screen . Login to your account and run Security Check again and save the file to the desktop then restart your PC to normal mode and upload the file .
My System SpecsSystem Spec
09 Jun 2013   #10
hkfish

Windows 7 Professional, 64 bit
 
 

oops run as administrator - here it is


Attached Files
File Type: txt checkup.txt (1.1 KB, 3 views)
My System SpecsSystem Spec
Reply

 Help to make sure trojan virus is really gone




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Trojan Virus Alerts
I was streaming free new release movies for our family on a daily basis from Putlocker and I have been having pop-ups from places demanding money to get rid of a Trojan virus they say is infecting my system.I have stopped streaming the movies but my laptop is running very slow, lots of pop-ups, not...
System Security
Trojan virus malwarebytes
i have a trojan virus that wont go away. its named trojan.agent.hmgen. no matter how many times i delete it with malwarebytes it wont go away.
System Security
Help locating possible trojan or other virus
So my saga with possible viruses continues...while playing a game with a friend just a few minutes ago, my computer took on a mind of its own and began opening strange command prompts as if they were cd'ing to the locations of other games, as well as moving the mouse around, opening windows, etc....
System Security
Want are the best afforable anti-virus for a trojan virus
what anti-virus would be great at getting rid of a trojan virus some of the anti virus i have used told me i had one but could not delete it.
System Security
How do i remove a trojan/virus
All of the programs on my computer hav changed 2 word for some reason. I think it must be a virus but i dont knw how 2 get rid of the virus as all my documents r now in word format. Also sm of my folders r missing which i assume is because of the virus, so i realy wd like 2 get them back. Please...
BSOD Help and Support
Help with trojan virus
Turned on computer this morning and downloaded nVidia driver for GeForce 8500 and then went to Seven Forums to look at Customazation threads and all of a sudden up pops a warning from Security Tools saying I have 40+ trojans and viruses in C and D drive. 1. Updated Malware and the ran scan found...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 12:01.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App