Maiware removal Virus Tracker 2.1

[mackie01]

Hi,

I recently installed superantispyware, mailware bytes and have a PC(running 64-bit Win7 Home).

Im having problems with a file on my computer, as I try to run Superantispyware (free version) the programe crashes at;

C:\User etc.....\appdata\roaming\microsoft\internet explorer\quicklaunch\virus trigger 2.1 link

what is this, is it harmful?

Both my macafee (paid current version) and mailware (free download) can't detect this problem and my superantispyware is not running past this file and says it cant help with the problem. I'm just worried this file that somehow exists but I cant see the file in the C:\User files.

I havent tried to reinstall anything yet and if this is malicious I will try to re-install the factory settings is this a back door virus, mailware etc). I did a little checking and my version of Win7 doesnt have quicklaunch. Also couldnt find the appdata folder.

Please help whats wrong and what is this file?

It may be nothing but I'm planning to re-boot my entire pc back to factory settings if i dont get this sorted out.

Please, please, please help,

Much appreciated.

[Maurice Naggar]

Hello,

As this is a Windows 7 system, on most all the following tools, you will need to right-click on the program or shortcut and select Run as Administrator to start the program.

Remember that as you go along.

What you are seeing is likely a rogue programs. But please be careful to document precisely the name or folders you see that are flagged.

You have used 2 similar (though slightly different names): Virus Tracker 2.1 and virus trigger

Do not run or start any other programs while these utilities and tools are in use!

Do NOT run any other tools on your own or do any fixes other than what is listed here.

If you have questions, please ask before you do something on your own.

But it is important that you get going on these following steps.

=

Close any of your open programs while you run these tools.

Step 1

1. Go >> Here << and download ERUNT

(ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)

2. Install ERUNT by following the prompts

(use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)

3. Start ERUNT

(either by double clicking on the desktop icon or choosing to start the program at the end of the setup)

4. Choose a location for the backup

(the default location is C:\WINDOWS\ERDNT which is acceptable).

5. Make sure that at least the first two check boxes are ticked

6. Press OK

7. Press YES to create the folder.

Step 2

Set Windows to show all files and all folders.

Set Folder options to show all hidden files and folders:

• Click the Start button , click Control Panel, click Appearance and Personalization, and then click Folder Options.
  
• Click the View tab.
  
• Under Advanced settings, click Show hidden files, folders, and drives, and then click OK.
  

Step 3

Important! => Open Notepad > Click on Format > Uncheck Word wrap, if checked. Exit Notepad.

Step 4

Please download Rooter.exe and save to your desktop.

alternate download link

• Double-click on Rooter.exe to start the tool. If using Vista or Windows 7, right-click and Run as Administrator...
  
• Click the Scan button to begin.
  
• Once the scan is complete, Notepad will open with a report named Rooter_#.txt (where # is the number assigned to the report).
  
• A folder will be created at the %systemdrive% (usually, C:\Rooter$) where the log will be saved.
  
• Rooter will automatically close. If it doesn't, just press the Close button.
  
• Copy and paste the contents of Rooter_#.txt in your next reply.
  

Important: Before performing a scan it is recommended to do the following to ensure more accurate results and avoid common issues that may cause false detections.

• Disconnect from the Internet or physically unplug you Internet cable connection.
  
• Close all open programs, scheduling/updating tasks and background processes that might activate during the scan including the screensaver.
  
• Temporarily disable your anti-virus and real-time anti-spyware protection.
  
• After starting the scan, do not use the computer until the scan has completed.
  
• When finished, re-enable your anti-virus/anti-malware (or reboot) and then you can reconnect to the Internet.
  

Step 5

Download OTL by OldTimer to your desktop: http://oldtimer.geekstogo.com/OTL.exe

• Close all open windows on the Task Bar. Click the icon (for Vista, right click the icon and Run as Administrator) to start the program.
  
• In the lower right corner, checkmark "LOP Check" and checkmark "Purity Check".
  
• Now click Run Scan at Top left and let the program run uninterrupted. It will take about 4 minutes.
  
• It will produce two logs for you, one will pop up called OTL.txt, the other will be saved on your desktop and called Extras.txt.
  
• Exit Notepad. Remember where you've saved these 2 files as we will need both of them shortly!
  
• Exit OTL by clicking the X at top right.
  

Download Security Check by screen317 and save it to your Desktop: here or here

• Run Security Check
  
• Follow the onscreen instructions inside of the command window.
  
• A Notepad document should open automatically called checkup.txt; close Notepad. We will need this log, too, so remember where you've saved it!
  

If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.

Then copy/paste the following into your post (in order):

• the contents of Rooter log
  
• the contents of OTL.txt
  
• the contents of Extras.txt
  
• the contents of checkup.txt
  

Be sure to do a Preview prior to pressing Submit because all reports may not fit into 1 single reply. You may have to do more than 1 reply.

Do not use the attachment feature to place any of your reports. Always put them in-line inside the body of reply.

[Maurice Naggar]

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!