TROJAN VUNDO/ TROJAN DOWNLOADER.SUURCH

[Seth]

You obviously enjoy playing online poker, and most poker sites are safe.

 

The poker entries in your log only refer to "buttons" that appear in Internet Explorer which will bring up that particular poker site, or a poker program that is required for playing.

 

If you're unsure of what poker site is safe, then use Mcafee's Site Advisor which will give you information about any particular site.

[Guest Wolfeymole]

Jesus H Christ

 

Seth there enough Poker program executables in that HJT to choke a ****ing mule.

 

Idiot get shut of them now mate.

[idots r us i know]

have got rid of them wolfey, got only 3 major sites left on it, these are the big ones and i know them to be safe to use thanks. just gonna find SAS and try and download it then i will run both SAS and malware again!!

 

Is there anywhere i can go to find out whats missing out of my system as i feel i may have deleted something which makes scrolling on the web pages slow and link icons not appear properly, thanks

[BeeCeeBee]

I feel that I have to add a word of warning here.

 

There are many large poker sites that spend a lot of money on security and for the most part do their very best to keep you safe. It would be very unwise to assume that is true of all or most sites. Extreme Tech Support - Free PC Help never recommends or endorses poker sites.

 

It is up to you to do your research in choosing what if any sites you wish to go to or download software from.

 

Personally I would make security my major concern in choosing a poker site and not be swayed by deals being offered to join.

[idots r us i know]

have tried to download SAS again but it just wont have it!!!

 

Is there anywhere on my pc i can find interrupted downloads so i can try and finish from there???

 

Also i feel that i may have deleted something critical on my pc, which is maybe why web pages are not being displayed properly and scrolling down is very slow???????? (even in computer folders etc.. it still scrolls very slowly)

 

is there somewhere that can check to see if my system has all the correct components needed???

[Guest Wolfeymole]

Poker sites are like porn sites to some respect.

 

Those that are out to make money legitimately will be fully secure and pose no threat.

 

It would go against the given sites policy to allow crap installs or installs loaded with malware because once discovered would tarnish any reputation they ever had.

 

All monetary transactions would be via an https connection and encrypted.

 

Just be careful ok.

[Seth]

have tried to download SAS again but it just wont have it!!!

 

Is there anywhere on my pc i can find interrupted downloads so i can try and finish from there???

 

Also i feel that i may have deleted something critical on my pc, which is maybe why web pages are not being displayed properly and scrolling down is very slow???????? (even in computer folders etc.. it still scrolls very slowly)

 

is there somewhere that can check to see if my system has all the correct components needed???

 

Are you able to download sas using the laptop?

 

Check to make sure all drivers are installed by right clicking "My Computer", choose Mange, then Device Manager. Does any listing show an exclamation mark or question mark in front of it?

[Guest Wolfeymole]

I think a brand new install is on the cards before long to be honest.

[idots r us i know]

have re run malware

heres the log:

 

Malwarebytes' Anti-Malware 1.30

Database version: 1400

Windows 5.1.2600 Service Pack 3

11/15/2008 8:35:52 PM

mbam-log-2008-11-15 (20-35-52).txt

Scan type: Quick Scan

Objects scanned: 45676

Time elapsed: 4 minute(s), 11 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 1

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 4

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\restore (Rootkit.Agent) -> Quarantined and deleted successfully.

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

C:\WINDOWS\Temp\BN2.tmp (Rootkit.Agent) -> Quarantined and deleted successfully.

C:\Documents and Settings\chris\Local Settings\Temp\TDSS8406.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\Documents and Settings\chris\Local Settings\Temp\TDSS856d.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.

C:\WINDOWS\Temp\TDSSe59e.tmp (Trojan.FakeAlert) -> Quarantined and deleted successfully.

[BeeCeeBee]

Earlier today i deleted a few things that looked of no signifigence in 'my computer' not sure if that has had an effect

 

Hi idiots,

 

I have no clue what you you may have deleted based upon that statement.

 

Based on nothing other then that quote from you I would suggest that you go to

 

Microsoft Update

 

and make sure that you remain up to date. If you happened to delete any important system file that probably will not find it. Have you rebooted since these deletions?

[idots r us i know]

Have checked device manager heres details:

 

Video Controller (VGA compatible) has YELLOW exclamation

 

?other devices

PCI simple communications controller has a YELLOW exclamation

RAID Controller has a YELLOW exclamation.

 

Thats it, what do you think?

 

Have taken into consideration what u said wolfey, i installed so many as i had just started out and tried out which was best, didint realise these sites would be so lax and allow malware to infect peoples pcs. thanks

[idots r us i know]

yes beecee

 

I have rebooted since the deletions, the worst has gone i think as malware only detected 5 criticals which were FAKE ALERT, not sure if im right here but is FAKE ALERT not as bad as those others i had??

[idots r us i know]

OH Seth

 

SAS has downloaded on lappy no problem!!!

[Seth]

OH Seth

 

SAS has downloaded on lappy no problem!!!

 

Well just save it to a USB stick or a cd, then install, update, and run it on the desktop.

 

You're scrolling problem is probably due to the devices not being installed (no drivers). You can get the drivers from your computer manufactures site, or post the make and model of the pc and one of us will find the drivers for you.

[idots r us i know]

thanks seth!!

 

I have run malware again and no threats were detected!!!!

 

Its the drivers now like u said, Im nopt sure of the make and model of my PC, it was custom built for me i think!!

 

How do i find out?

[Seth]

Look at the back of the computer for a sticker that says the model number. If there isn't one, you have to use a program like Everest from MajorGeeks.com - Download Freeware and Shareware Computer Utilities. to identify the motherboard, then we can get the drivers. We would also need to know if your video card is a separate add in card, or part of the motherboard.

 

In regards to SAS, you need to get that running as it's the most important scanner. (don't forget about posting it's log..lol).

[idots r us i know]

K9VGM-V series (MS-7253 v1.x) Micro-ATX mainboard

 

Does that sound right???

 

I found the software driver disk, perfect condition except for 1 little thing..... Snapped down 1 side ggggrrrrrr lol

[Seth]

Here are the drivers:

 

MSI -- MICRO-STAR INT'L CO., LTD.

 

Once you have the appropriate drivers installed, go back to device manager and check that no other devices have an exclamation or question mark beside them.

 

Your motherboard has an onboard video connection, but do you know if you have a separate video card that's being used?

[idots r us i know]

Thanks a lot seth

 

Im not sure about the video bit, im trying to find the receipt.

 

If its more expensive to have a separate video card then no, because when i had it made i told them that i wouldnt ever be playing games or watching tons of films on it or anything, all i asked for was a basic model just for surfing the net. Does it sound like it would be separate to you????

 

Will have a look for the drivers thanks!!!!

[idots r us i know]

Hi seth

 

I think ive found the correct download, have downloaded it and extracted the files. When i go into it and select set-up it goes to a blue set-up screen but then says it failed to install. What have i done wrong??

[idots r us i know]

Oh and now i cant find the zip folder of the driver now!!! searched all my computer and its vanished

 

i feel like smashing this thing up lol

[RandyL]

What have you done wrong?

 

Everything since day one. You installed many programs to infect and corrupt your PC. You likely still have them too. Have you deleted these suspect programs before running the scans?

 

You have probably used programs to attempt to cleanup that are in themselves suspect. Many of these will do more harm then good. Spyware removal programs that are in themselves suspect and reg cleaners come to mind.

 

The fact that you said you ran a removal program we suggested and it could not remove three infections leads me to believe you only ran one and did not bother to run the others or remove the suspect programs first.

 

I could go on and on with more but with the errors and the messages you posted it seems you are still infected with basic malware that cannot be removed unless you follow all the advice given.

 

Even then I think everything you have done prior to coming to FPCH has not only infected your system badly but steps you took at previous attempts at cleaning have made it worse.

 

Even if you followed all our steps the errors you still get leads me to think you have major system errors caused by previous attempts to clean.

 

I would suggest that you backup everything and reinstall at this point. You have done too much damage. Upon reinstall be more carefull in the future.

[idots r us i know]

Hi

 

I think i have nearly finished everything, i went onto microsoft updates and got what i needed, pages scroll perfectly now!!!

 

Checked device manager and the only item left with a YELLOW exclamation mark is the RAID controller!!

 

What should i do??

[idots r us i know]

Hi randyl

 

I can see what your saying but my system is now clean, the only advice i couldnt follow was to download SAS, thats a point will try that again.

 

Everything is back to normal except on me desktop it says ACTIVE DESKTOP RECOVERY!!

and web pages dont show all the icons properly, does it have something to do with that RAID controller??

 

Thanks

[RandyL]

You are not clean.

 

If you cannot download SAS you are not clean.

 

Do you still have those poker programs?

 

Why do you still have issues?

 

You still have corrupted Windows files.

 

Dump the suspect programs and get good security.

 

Better yet use your disks to reinstall.