New
#11
Hi,
Its always wise to double-check using another scanning engine. I recommend performing a full scan using the ESET online scanner.
Post back the findings.
Regards,
Glden
Also try another scan with malwarebytes: Malwarebytes : Free anti-malware, anti-virus and spyware removal download
Whoops. Sorry. Wrong quote
Last edited by AlvitrValkyrie; 15 Jan 2012 at 06:05. Reason: Wrong quote
Back up your registry first Registry - Backup and Restore
Then follow the manual removal here: How to Remove VirTool:Win32/obfuscator.XZ Completely and Effectively (Step-by-step Removal) - Tee Support Blog
Now run a full scan with MSE and ESET ESET :: Get a FREE Online Virus Scan
Hi everyone
Thanks for you help.
I ran MSE again and ESET and both showed no threats.
Would it be risky to not run Malwarebytes or do the manual removal? - I baulked at the registry backup (I've never done one before!) But if you guys feel that it would be safer, I will give it a go
cheers
Hi Arthur,
Once Jacee answers in these threads, I woud ignore all other suggestions and only follow her instructions.
Follow the tutorial for backing up the registry and you will be fine.
Regards,
Golden
Okay, don't try to do the 'manual' removal.
Download DDS from one of these links:
Mirror 1 Mirror 2 Mirror 3
- Disable any script blocking protection
- Double click the dds icon to run the tool.
- When done, DDS will open two (2) logs:
- DDS.txt
- Attach.txt <--- will be minimized in the task tray
- Save both reports to your desktop.
Include the contents of both logs in your next post.
The scan will instruct you to post Attach.txt as an attachment.
Let me see the contents of both logs so I can try to help you further.
Hi Jacee
Sorry I took so long - and what you asked me to do didn't take long at all!
Are these the files you needed?
Or do you want me to copy and paste the contents in a reply?
cheers
Thank you, that's what I needed.
Download Combofix from any of the links below, and save it to your desktop.<--Important
Link 1
Link 2
Link 3
Click on this link Here to see a list of programs that should be disabled.
The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
If your anti-virus or firewall complains, please allow this script to run as it is not malicious.
Next: Disconnect from the internet. If you are on Cable or DSL, unplug your computer from the modem.
Next: Please disable all onboard security programs (all running with back ground protection) as it may hinder the scanner from working.
This includes Antivirus, Firewall, and any Spyware scanners that run in the background.
Note: Do not mouseclick combofix's window while its running. That may cause it to stall
- Double click combofix.exe and follow the prompts.
- When finished, it will produce a log for you. Post that log in your next reply
Please be patient while the scan runs, at times it may appear to stall.
When finished and after reboot (in case it asks to reboot), it should open a log, combofix.txt.
Post this log in your next reply
After rebooting ensure your Security applications have been re-enabled.
In your next reply post:
ComboFix.txt
***A guide and tutorial on "How to use Combofix" can be found here:
A guide and tutorial on using ComboFix
IF CF won't run:
During the download, rename Combofix.exe to sVchost.exe