Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


SafetyKeeper Malware [Moved]

  • Please log in to reply
1 reply to this topic

#1 Kay-w


  • Members
  • 1 posts
  • Local time:04:05 PM

Posted 14 September 2009 - 07:07 AM

Few days ago my laptop got infected with "SafetyKeeper". I read the thread about how to remove it in this website and followed the steps but "Malwarebytes' Anti-Malware" cann't launch. it downloads and creats the icons but it doesn't open. The same happened when I tried to download "Kaspersky Internet Security 2009". I also suspect that my laptop has other viruses/trojans. It is very slow and IE pages just freezes and i am forced to close them. two days ago i started getting IE pages just popping up. I downloaded "DDS" and "RootRepeal" as instructed here but they wont launch either. How can I remove these viruses/trojans if i can't start a program to remove them. I tried "Kaspersky Online Scan" and these are the results (this was not a full-scan it was applied to some "critical areas" as stated by the software)


Monday, September 14, 2009
Operating system: Microsoft Windows Vista Home Basic Edition, 32-bit Service Pack 1 (build 6001)
Kaspersky Online Scanner version:
Last database update: Monday, September 14, 2009 01:31:21
Records in database: 2802800

Scan settings
scan using the following database extended
Scan archives yes
Scan e-mail databases yes

Scan area Critical areas
C:\Program Files
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

Scan statistics
Objects scanned 148679
Threats found 4
Infected objects found 5
Suspicious objects found 0
Scan duration 06:01:36

File name Threat Threats count
jusched.exe\E3C704F4.x86.dll/jusched.exe\E3C704F4.x86.dll Infected: Trojan-Spy.Win32.Agent.azpj 1

globalroot\Device\__max++>\E3C704F4.x86.dll/globalroot\Device\__max++>\E3C704F4.x86.dll Infected: Trojan-Spy.Win32.Agent.azpj 1

C:\Program Files\Trend Micro\Internet Security\Quarantine\ise32.exe Infected: Trojan-DDoS.Win32.Agent.bo 1

C:\Program Files\Trend Micro\Internet Security\Quarantine\jfvkcsy.bat Infected: Trojan-GameThief.Win32.OnLineGames.xls 1

C:\Windows\System32\jlc3pf5o.exe Infected: Trojan.Win32.FraudPack.tgz 1


I would really appreciate any help on this issue. Thank you...

BC AdBot (Login to Remove)


#2 Orange Blossom

Orange Blossom

    OBleepin Investigator

  • Moderator
  • 36,987 posts
  • Gender:Not Telling
  • Location:Bloomington, IN
  • Local time:12:05 PM

Posted 14 September 2009 - 09:52 PM

As the above log is from an AV scan, I am shifting this topic from the specialized HiJack This forum to the Am I Infected forum.

==>PLEASE DO NOT NOW POST OTHER LOGS<== unless a log is specifically requested.
Help us help you. If HelpBot replies, you MUST follow step 1 in its reply so we know you need help.

Orange Blossom

An ounce of prevention is worth a pound of cure

SpywareBlaster, WinPatrol Plus, ESET Smart Security, Malwarebytes' Anti-Malware, NoScript Firefox ext., Norton noscript

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users