I don´t know if there are any P2P program on the computer. please notice that I don´t have fysical contat with the computer, it´s my mothers 30 miles away...
* If you are using any P2P (file sharing) programs, please remove them before we clean your computer.
The nature of such software and the high incidence of malware in files downloaded with them is counter productive to restoring your PC to a healthy state.
* If this computer belongs to someone else, do you have authority to apply the fixes we will use?
* Have you already fixed entries using HijackThis? If so, please restore all the backups and then post another log.
* After we begin working, please print or copy all instructions to Notepad in order to assist you when carrying out procedures.
Please follow all instructions in sequence. Do not, on your own, install/re-install any programs or run any fixes or scanners that you have not been instructed to use because this may cause conflicts with the tools that I am using.
** We may be using some specialized tools during our fix. Certain embedded files that are part of legitimate programs or specialized fix tools such as process.exe, restart.exe, SmiUpdate.exe, reboot.exe, ws2fix.exe, prcviewer.exe and nircmd.exe may at times be detected by some anti-virus/anti-malware scanners as a "RiskTool", "Hacking tool", "Potentially unwanted tool", or even "malware (virus/trojan)" when that is not the case.
Such programs have legitimate uses in contexts where an authorized user or administrator has knowingly installed it. These detections do not necessarily mean the file is malware or a bad program. It means it has the potential for being misused by others. Anti-virus scanners cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert you or even automatically remove them.
* If your replies do not fit in one post while we are handling your issue, please reply to yourself until all text is submitted. It may take several posts.
Your log has not been replied to at the Swedish forum. If you would prefer to work over there, that is fine. However, if you do that, I will discontinue research on your problem in order to work with other people waiting in line for help. Let me know what you would like to do.
If you do not have physical contact with the computer, how will you use the tools and post reports from their logs? If I handle your problem, cleaning will take several days. There are multiple infections showing in that log.
My post in the other forum have also been answered, basiclly the answere is that it´s some new form of Vundo and it´s really hard to clean the computer, maybe not worth the efford?
The are backups on all the important files and pictures, maybe it´s easier to reinstall? in that case, what should I think on (we already reinstalled all the norton and installed Nod32 instead and as you said, it looks like there are very many virus and stuff...)/norton did´t find much.
The problem is that you cannot simply "tell" your mother what tools to use. Our instructions must be printed out and followed EXACTLY step-by-step with any errors reported accurately. Otherwise, if something goes wrong, it could damage the system.
Hi. I understand your concern about my distane to the computer but that should´t be any big problem, I will tell my mother what tools/action she has to take in order to enable you to help me..
I don´t think my post will geat any majoure attention in the swedish forum, do you want me to delete it? Because I belive I can get better help from you than I will get in that forum.
I cannot read Swedish, but the reply was short, so I get the impression that the helper did not want to fix this.
We can try to fix it, but you really need to have access to the computer so that you can sit in front of it and follow step-by-step instructions. It may take several days.
starbomb
8 Posts
0
January 9th, 2008 17:00
Bugbatter
3 Apprentice
•
20.5K Posts
0
January 9th, 2008 17:00
I am reviewing your log.
In the meantime, you can help me by doing the following:
* Have you have posted this issue on another forum? If so, please provide a link to the topic.
* If you are using any cracked software, please remove it.
Definition of cracked software:
http://en.wikipedia.org/wiki/Software_cracking
* If you are using any P2P (file sharing) programs, please remove them before we clean your computer.
The nature of such software and the high incidence of malware in files downloaded with them is counter productive to restoring your PC to a healthy state.
* If this computer belongs to someone else, do you have authority to apply the fixes we will use?
* Have you already fixed entries using HijackThis? If so, please restore all the backups and then post another log.
* After we begin working, please print or copy all instructions to Notepad in order to assist you when carrying out procedures.
Please follow all instructions in sequence. Do not, on your own, install/re-install any programs or run any fixes or scanners that you have not been instructed to use because this may cause conflicts with the tools that I am using.
** We may be using some specialized tools during our fix. Certain embedded files that are part of legitimate programs or specialized fix tools such as process.exe, restart.exe, SmiUpdate.exe, reboot.exe, ws2fix.exe, prcviewer.exe and nircmd.exe may at times be detected by some anti-virus/anti-malware scanners as a "RiskTool", "Hacking tool", "Potentially unwanted tool", or even "malware (virus/trojan)" when that is not the case.
Such programs have legitimate uses in contexts where an authorized user or administrator has knowingly installed it. These detections do not necessarily mean the file is malware or a bad program. It means it has the potential for being misused by others. Anti-virus scanners cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert you or even automatically remove them.
* If your replies do not fit in one post while we are handling your issue, please reply to yourself until all text is submitted. It may take several posts.
I look forward to your reply.
Bugbatter
3 Apprentice
•
20.5K Posts
0
January 9th, 2008 18:00
If you do not have physical contact with the computer, how will you use the tools and post reports from their logs? If I handle your problem, cleaning will take several days. There are multiple infections showing in that log.
I will wait for your reply before I continue.
starbomb
8 Posts
0
January 10th, 2008 18:00
starbomb
8 Posts
0
January 10th, 2008 18:00
Bugbatter
3 Apprentice
•
20.5K Posts
0
January 10th, 2008 18:00
Please let me know how you want to proceed.
starbomb
8 Posts
0
January 10th, 2008 18:00
Bugbatter
3 Apprentice
•
20.5K Posts
0
January 10th, 2008 19:00
We can try to fix it, but you really need to have access to the computer so that you can sit in front of it and follow step-by-step instructions. It may take several days.
starbomb
8 Posts
0
January 11th, 2008 15:00
Bugbatter
3 Apprentice
•
20.5K Posts
0
January 11th, 2008 16:00