 Winfixer/virtumonde And Financial Stuff |
Welcome Guest ( Log In | Click here to Register a free account now! )
Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.| Important Announcement: The winners of the BC Million Post contest have been announced. You can read who the winners are at this post. - BleepingComputer Management |
  |
 Dec 14 2005, 03:47 AM
Post
#1
|
|
|
New Member  Group: Members Posts: 11 Joined: 7-December 05 Member No.: 43,636  |
none of the steps leading up to HJT have solved the problem, and my computer is still acting funny (eg: inappropriate shutdowns, unusual 'gridlock' that requires a restart, and unfamiliar error messages... ) so I am going on to that... in the meantime, is it safe to view my financial information (over a secure link), or to use paypall? what are the chances that they already have my financial data? also, what are the limits on the HJT log analysis? how will I know when my computer is 'all the way better' since it seems like the majority of security programs still let stuff through. thanks, Greg |
 |
 
|
|
Dec 14 2005, 11:08 AM
Post
#2
|
|
|
Distinguished Member Group: Members Posts: 641 Joined: 25-November 04 Member No.: 5,839 |
Don't do anything with Hijackthis unless you have been told so by a expert as you may do serious damage to your PC. If a expert says the hijackthis log is clean then your PC will be.
If you think you are infected submit a hijackthis log to the HJT Forum. How to submit a hijackthis log Download Hijackthis Try running the following from safe mode (Getting to safe-mode) Sysclean you'll also need the virus template file from here lpt***.zip remember to extract the contents of the zip file into the same folder as Sysclean.com or DrWeb CureIT or KASFX which is powered by the Kaspersky AV engine, you will need internet access to update it. If you haven't got net access in safe mode, update it before you use it. If your good with the command line also try Sophos Command Line scanner this command will scan all of your hdd's SAV32CLI.EXE -F -di -remove -dn -mbr -all -zip -p=avscanlog.txt and give you a log file to review afterwards. Also try installing and running A2 Free and Ewido again run from safe mode. I'd also run Spybot(Spybot Tutorial) and Adaware If your using Win2K/XP run adaware/spybot from "safe mode with command prompt" If your using Win9x just run it from safe mode the command line options aren't needed.. At the C:\ prompt type the following:- cd\ C:\progra~1\spybot~1\spybotsd.exe /autocheck /autofix cd\ C:\progra~1\lavasoft\ad-awa~1\ad-aware.exe -------------------- |
|
|
|
|
Dec 15 2005, 01:34 AM
Post
#3
|
|
|
New Member Group: Members Posts: 11 Joined: 7-December 05 Member No.: 43,636 |
hi, thanks for all the info... I guess I wasn't very clear, I have posted a HTJ log and am only using as directed. also I did all the previous steps recommended by bleeping computer before HTJ (adaware, spybot, etc.) but that didn't help.
this was my main question: in the meantime, is it safe to view my financial information (over a secure link), or to use paypall? what are the chances that they already have my financial data? thanks! Greg |
|
|
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
| Lo-Fi Version | Time is now: 21st November 2008 - 11:36 PM |
© 2003-2008 All Rights Reserved Bleeping Computer LLC.