Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Am i Still infected_2?


  • This topic is locked This topic is locked
2 replies to this topic

#1 northBRIDGE

northBRIDGE

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:04:21 PM

Posted 03 March 2009 - 06:16 AM

Hi everybody , almost two weeks ago I start receiving anivir warning about four file recognized as virus , if I remeber well they were trojan. As I delete one of them , suddenly another warning appeared, until I "powered off" the system configuration restore of windows in computer properties. The four file were cisvc.exe and esentutl.exe(wirh keys in the windows registy in the explore/run/ keys and with /waitservice optione), mstsc.exe (in System32/drivers/ instead that in System32) and cstsc.exe . Only today I've used Hijack , and I've deleted these files.
My question is : am I safe now, or I can be still infected?

Attached Files


Edited by northBRIDGE, 03 March 2009 - 06:19 AM.


BC AdBot (Login to Remove)

 


#2 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:04:21 PM

Posted 16 March 2009 - 05:33 PM

Hello northBRIDGE,

Posted Image

Sorry about the delay.:thumbup2: If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.

Thanks,
tea
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?

#3 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:04:21 PM

Posted 23 March 2009 - 03:52 PM

Due to the lack of feedback this Topic is closed.

If you need this topic reopened, please request this by sending the moderating team a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users