RetouchPRO

Go Back   RetouchPRO > Community > Salon
Register Blogs FAQ Site Nav Search Today's Posts Mark Forums Read


Salon Just hanging around...
(Social area, where non-retouching talk is encouraged)

infection in Action

Reply
 
Thread Tools
  #21  
Old 01-17-2007, 03:53 PM
Gary Richardson's Avatar
Gary Richardson Gary Richardson is offline
Senior Member
 
Join Date: Mar 2004
Location: Yorkshire, England
Posts: 2,717
Re: infection in Action

Not really, its a binary executable.

OK, lets try doing an online scan and seeing what kind of log (if any) we get back.

Please do an online scan with Kaspersky Online Scanner

Note: You must be using Internet Explorer as your browser as it will be necessary to install an Active X component to your computer.

Important If you have previously used Kaspersky Online Scanner (before 8th Aug 2006), you will have to uninstall the old version using Add/Remove Programs in Control Panel before you can use the new version.

Click on Kaspersky Online Scanner

You will be promted to install an ActiveX component from Kaspersky, Click Yes.
  • The program will launch and then start to download the latest definition files.
  • Once the scanner is installed and the definitions downloaded, click Next.
  • Now click on Scan Settings.
  • In the scan settings make sure that the following are selected:
    • Scan using the following Anti-Virus database:
      • Extended (If available otherwise Standard)
    • Scan Options:
      • Scan Archives
      • Scan Mail Bases
  • Click OK.
  • Now under select a target to scan select My Computer.
  • The scan will take a while so be patient and let it run. Once the scan is complete it will display if your system has been infected.
  • Now click on the Save as Text button:
  • Save the file to your desktop.
  • Copy and paste that information in your next post please.

please note, this scanner will not try to fix anything, it will just give us a log so we can get some sort of idea what's happening.

Also try this.
  • Download combofix.exe by sUBs
  • Double click combofix.exe & follow the prompts.
  • When finished, it will produce a log for you. Post that log in your next reply please.
Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

Last thing,

Download IttyBittyProcessManager

Run this programme and it will bring up a "Task Manager" like window. Don't ry to stop any processes with it, just list what it finds so I can look and see what's running on her computer. Do this by clicking on the Save button (the one that looks like a floppy disc) and posting the txt file it produces.

Last edited by Gary Richardson; 01-17-2007 at 04:08 PM.
Reply With Quote top
  #22  
Old 01-17-2007, 04:45 PM
T Paul's Avatar
T Paul T Paul is offline
Moderator
 
Join Date: Aug 2001
Location: USA
Posts: 2,987
Re: infection in Action

She may not get to this until tomorrow, but I'll keep you posted. Thanks again for all the help!!!
Reply With Quote top
  #23  
Old 01-17-2007, 05:02 PM
Gary Richardson's Avatar
Gary Richardson Gary Richardson is offline
Senior Member
 
Join Date: Mar 2004
Location: Yorkshire, England
Posts: 2,717
Re: infection in Action

OK, no worries.

Kaspersky usually takes a while to run, and may produce a large log, it may need several posts to get it all in.

Unfortunately as you know I'm away skiing on Saturday, so if this turns out to be a difficult infection (won't know until we get some sort of log back) then you may have to seek help at one of the forums, as sometimes it takes a while to get rid of an infection completely.

I've posted links to some of the more reliable in the RetouchPro library http://www.retouchpro.com/library/browselinks.php?c=21, but I'll advise you better after we find out what problems (if any) your sister has running the latest instructions.
Reply With Quote top
  #24  
Old 01-17-2007, 05:05 PM
T Paul's Avatar
T Paul T Paul is offline
Moderator
 
Join Date: Aug 2001
Location: USA
Posts: 2,987
Re: infection in Action

Quote:
Originally Posted by Gary Richardson
Unfortunately as you know I'm away skiing on Saturday...
Must be nice!
Reply With Quote top
  #25  
Old 01-17-2007, 05:09 PM
Gary Richardson's Avatar
Gary Richardson Gary Richardson is offline
Senior Member
 
Join Date: Mar 2004
Location: Yorkshire, England
Posts: 2,717
Re: infection in Action

Quote:
Originally Posted by T Paul
Must be nice!
Hope so, its 2 years since I last strapped my planks on, and I've got withdrawal symptoms pretty bad (I'm a hopeless ski junkie).
Reply With Quote top
  #26  
Old 01-18-2007, 04:04 PM
T Paul's Avatar
T Paul T Paul is offline
Moderator
 
Join Date: Aug 2001
Location: USA
Posts: 2,987
Re: infection in Action

I haven't gotten a chance to really talk to my sister yet, but from a quick email she did run Kaspersky. It did say she was still infected, but hotmail won't let her attached the file to send to me b/c it says it contains a virus.
Reply With Quote top
  #27  
Old 01-18-2007, 05:31 PM
Gary Richardson's Avatar
Gary Richardson Gary Richardson is offline
Senior Member
 
Join Date: Mar 2004
Location: Yorkshire, England
Posts: 2,717
Re: infection in Action

OK.

I think at this point its going to be easier if she contacts one of the Malware help sites direct, as I said I'm going skiing on Saturday, and I'll be a bit tied up tomorrow with packing and other arrangements.

It's necessary to get her problems resolved quickly as most infections only get worse if left untreated.

Try any of the following sites for help, all are staffed by qualified volunteers and will give advice that can be relied upon. (I help out at all 3, so have personal experience with them).

http://www.spywarewarrior.com/index.php
http://forum.malwareremoval.com/
http://forums.tomcoyote.org/

The first 2 are smaller forums, where the relationship between helper and client tends to be a bit more personal.

The last 2 are both training schools, so its possible you'll get a "trainee", all trainees are supervised, and all information given will have been checked by an instructor before it is allowed to be posted. Because of this replies can sometimes be slower on these forums. When I say "trainee", this does not mean someone who is in the early stages of their training, but someone who is close to qualifying.

Because these forums are set up for Malware removal the post size limits are usually such that she'll be able to post even large logs direct to forum, which should remove problems like those with hotmail.

Good luck, let me know how things go, I'll read up when I get back.

OOPS, almost forgot. She'll have to register to get help, but all information given is kept confidential, she will not be spammed or bothered in any way.

Tell her to post her problem in the HJT forum, explaining her inability to post a HJT log, they'll take it from there.

Last edited by Gary Richardson; 01-18-2007 at 05:37 PM.
Reply With Quote top
  #28  
Old 01-19-2007, 10:48 AM
T Paul's Avatar
T Paul T Paul is offline
Moderator
 
Join Date: Aug 2001
Location: USA
Posts: 2,987
Re: infection in Action

Thanks so much Gary and have a great time skiing!!
Reply With Quote top
  #29  
Old 01-23-2007, 05:20 PM
T Paul's Avatar
T Paul T Paul is offline
Moderator
 
Join Date: Aug 2001
Location: USA
Posts: 2,987
Re: infection in Action

Hope you had a good time skiing! I haven't heard back from my sister yet. Besides the computer woes, she is also in the process of moving so life is hectic!
Reply With Quote top
  #30  
Old 01-27-2007, 07:22 PM
Gary Richardson's Avatar
Gary Richardson Gary Richardson is offline
Senior Member
 
Join Date: Mar 2004
Location: Yorkshire, England
Posts: 2,717
Re: infection in Action

Hi T,

Had a great time thanks, fresh snow and loads of sun, so I'm feeling much refreshed mentally, (if exhausted physically).

Keep me posted as to your sister's problems, and we should be able to resolve them. I appreciate the disruption a move may cause, so I don't expect anything until she's settled and ready to proceed.

It's 01:20 am here, and I just got home a couple of hours ago, so I'm turning in for the night now, look forward to catching up with all the other things I've missed tomorrow.
Reply With Quote top
Reply

  RetouchPRO > Community > Salon


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Sheri's Sketch - HELP NEEDED! tonyt Software 7 06-28-2007 05:22 AM
How Do I Record "Save As" as an Action Without a Filename? steiny Software 1 10-30-2006 11:24 AM
Another Action Question Scribe Software 8 11-02-2005 08:16 AM
Combining Photoshop Actions Into a Set Scribe Software 6 10-24-2005 11:19 AM
Free B&W Toning action set gmitchel Photo Restoration 3 10-20-2005 09:56 AM


All times are GMT -6. The time now is 08:35 PM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.
SEO by vBSEO ©2011, Crawlability, Inc.
Copyright © 2016 Doug Nelson. All Rights Reserved