m1nnow Posted April 13, 2013 ID:668439 Share Posted April 13, 2013 About a week ago, I got a warning telling me that winrscmde had stopped working, I clicked on report problem to microsoft and walked awy thinking it was a genuine process that stopped. This is one a computer that is left on, but is not used everyday. Now, I am still getting the winrscmde warning and AVG is throwing upwarning evey hour or so. It has repetedly removed Exploit ROgue Scanner type 1929 and an HTML Framer. Multiple full system scans by MBAM has removed a trojan that seems to returning also. Any help would be greatly appreciated.attach.txtdds.txt Link to post Share on other sites More sharing options...
Maniac Posted April 13, 2013 ID:668482 Share Posted April 13, 2013 Hello m1nnow and ! My name is Maniac and I will be glad to help you solve your malware problem.Please note:If you are a paying customer, you have the privilege to contact the help desk at Consumer Support. If you choose this option to get help, please let me know.I recommend you to keep the instructions I will be giving you so that they are available to you at any time. You can save them in a text file or print them.Make sure you read all of the instructions and fixes thoroughly before continuing with them.Follow my instructions strictly and don’t hesitate to stop and ask me if you have any questions.Post your log files, don't attach them. Every log file should be copy/pasted in your next reply.Do not perform any kind of scanning and fixing without my instructions. If you want to proceed on your own, please let me know.BACKDOOR WARNINGOne or more of the identified infections is known to use a backdoor.This allows hackers to remotely control your computer, steal critical system information and download and execute files.I would advice you to disconnect this PC from the Internet immediately. If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable, and it would be wise to contact those same financial institutions to apprise them of your situation.Though the infection has been identified and can be killed, because of it's backdoor functionality, your PC is very likely compromised and there is no way to be sure your computer can ever again be trusted. Many experts in the security community believe that once infected with this type of trojan, the best course of action would be a reformat and reinstall of the OS. Please read these for more information:Help: I Got Hacked. Now What Do I Do?Help: I Got Hacked. Now What Do I Do? Part IIHow Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?When Should I Format, How Should I ReinstallWe can still clean this machine but I can't guarantee that it will be 100% secure afterwards. Let me know what you decide to do. If you decide to go through with the cleanup, please let me know. Link to post Share on other sites More sharing options...
m1nnow Posted April 14, 2013 Author ID:668511 Share Posted April 14, 2013 well, I guess I'm just gonna reformat. Thanks for your time. Link to post Share on other sites More sharing options...
Maniac Posted April 14, 2013 ID:668514 Share Posted April 14, 2013 You're welcome! Here some future malware prevention tips:users.telenet.be/bluepatchy/miekiemoes/prevention.htmlSafe surfing! Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted April 14, 2013 Root Admin ID:668567 Share Posted April 14, 2013 Since this issue is resolved I will close the thread to prevent others from posting here. If you need assistance please start your own topic and someone will be happy to assist you. Link to post Share on other sites More sharing options...
Recommended Posts