Barbarian Posted September 26, 2009 ID:133526 Share Posted September 26, 2009 Tried all the processes I found posted to remove the malware that stops the quickscan and hijacks. I have VistaPlease help this is very frustrating! I see why people buy Mac's!!!Hijack this ran quickly and now won't run again. How do I get the log file for you??? Link to post Share on other sites More sharing options...
Staff screen317 Posted September 27, 2009 Staff ID:133735 Share Posted September 27, 2009 Hi and welcome to Malwarebytes.Please visit this webpage for instructions for running ComboFix: http://www.bleepingcomputer.com/combofix/how-to-use-combofixWhen the tool is finished, it will produce a report for you.Please post the C:\ComboFix.txt along with a new HijackThis log so we may continue cleaning the system.-screen317 Link to post Share on other sites More sharing options...
Barbarian Posted September 28, 2009 Author ID:134873 Share Posted September 28, 2009 Hi and Thanks Screen -Got in contact with Microsoft level 2 support. It turned out to be a trojan in the cngaudit.dll file. He recognized it by the filesize - 61k instead of 16k.What was cool was he took control of my machine and navigated to this site!He used avanger to replace the .dll and then ran the microsoft scanner.Just thought the it was impressive they were using you guys also....Thanks for helping!!! Link to post Share on other sites More sharing options...
Staff screen317 Posted September 30, 2009 Staff ID:135934 Share Posted September 30, 2009 It's possible that there are still leftover files; though Microsoft did what we would have done, I recommend that you still run ComboFix.-screen317 Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 8, 2009 Root Admin ID:139645 Share Posted October 8, 2009 Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you. Link to post Share on other sites More sharing options...
Recommended Posts