Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

"EtcaKjaz.dat" keeps reappearing


  • Please log in to reply
8 replies to this topic

#1 KettRedfox

KettRedfox

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:09 AM

Posted 07 August 2014 - 04:35 PM

Hello, as stated this file keeps reappearing E:/Program Files

 

I found a entry in my registry under HKEY_CURRENT_USER > Software > Microsoft > Windows > Currentversion > Run

 

 

u67lG8Y.png

 

I have no idea what to do from here on, please help me...



BC AdBot (Login to Remove)

 


#2 Alex&Vanko

Alex&Vanko

  • Banned
  • 1,394 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:09 AM

Posted 07 August 2014 - 04:47 PM

Hi KettRedfox and :welcome:

So you can see it in E:\ProgramData

Upload it here - https://www.virustotal.com/bg/

Paste the link of result.

Thank you!


Edited by Alex&Vanko, 07 August 2014 - 05:21 PM.


#3 KettRedfox

KettRedfox
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:09 AM

Posted 07 August 2014 - 04:58 PM

Um, it's all russian, what am I supposed to copy from there? I have this link: https://www.virustotal.com/bg/file/4ccb4ac54bf04ff49e70b3ba9d0c536652649ebcba7e9d1a3d42d66fab1952c6/analysis/

#4 Alex&Vanko

Alex&Vanko

  • Banned
  • 1,394 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:09 AM

Posted 07 August 2014 - 05:05 PM

Download Screen317 Security Check HERE and save it to your Desktop.
* Double-click SecurityCheck.exe
* Follow the onscreen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt
* Please post the contents of that document.
Note:: If any security program requests permission to access the Internet, allow it to do so

Please download MiniToolBox HERE to your desktop to run it.
Checkmark the following boxes:
* List content of Hosts
* Flush DNS
* Report IE Proxy Settings
* Reset IE Proxy Settings
* Report FF Proxy Settings
* Reset FF Proxy Settings
* List last 10 Event Viewer log
* List Installed Programs
* List Devices (do NOT change any settings here)
* List Users, Partitions and Memory size
Note: When using "Reset FF Proxy Settings" option Firefox should be closed.
Click Go and Copy / Paste the result. (result.txt)

 

Thank you!



#5 Alex&Vanko

Alex&Vanko

  • Banned
  • 1,394 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:09 AM

Posted 07 August 2014 - 05:09 PM

https://www.virustotal.com/en/

Sorry that was my language.

Thank you!



#6 KettRedfox

KettRedfox
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:09 AM

Posted 07 August 2014 - 06:02 PM

Security Screen:

 http://pastebin.com/ucxza3FK

 

MiniToolBox

http://pastebin.com/vYCmMssf

 



#7 Alex&Vanko

Alex&Vanko

  • Banned
  • 1,394 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:09 AM

Posted 07 August 2014 - 06:05 PM

You can do it again with VirusTotal.



#8 KettRedfox

KettRedfox
  • Topic Starter

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:10:09 AM

Posted 07 August 2014 - 06:08 PM

https://www.virustotal.com/en/file/4ccb4ac54bf04ff49e70b3ba9d0c536652649ebcba7e9d1a3d42d66fab1952c6/analysis/1407452845/



#9 Alex&Vanko

Alex&Vanko

  • Banned
  • 1,394 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:09 AM

Posted 07 August 2014 - 06:55 PM

See in Programs and Features if there is something you do not know and uninstall it.

Do you have problems with Firefox?

Did AdwCleaner find anything?

You can find the report log in your system drive, Adwcleaner folder (for example: C:\adwcleaner)

Download and update Adobe Flash,uncheck promo offer - http://get.adobe.com/flashplayer/

Download and update Java - http://java.com/en/download/index.jsp

Update Firefox - https://www.mozilla.org/en-US/firefox/channel/#firefox

Download and install Net Framework 4.5 - http://www.microsoft.com/en-us/download/details.aspx?id=30653

After that 4.5.1 - http://www.microsoft.com/en-us/download/details.aspx?id=40779

Did Avira say anything?

 

Download Malwarebytes' Anti-Malware Free HERE to your desktop.
    - Do not accept the Free Trial Version at this time -
    * Double-click mbam-setup.exe and follow the prompts to install the program.
    * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    * If an update is found, it will download and install the latest version.
    * Once the program has loaded, select Perform quick scan, then click Scan.
    * When the scan is complete, click OK, then Show Results to view the results.
    * Be sure that everything is checked, and click Remove Selected.
    * When completed, a log will open in Notepad.
    * Post the log back here.
Open MalwareBytes Anti-Malware and then click on History
On the left column, select Application Logs. Select the most recent log among the list, it is usually the one on the top (or sort by date) and open it.
Go to the bottom left corner to Export and select Text File (*.txt)
Save it to the desktop

    Be sure to restart the computer if requested.

 

Please download the ESET Online Scanner HERE and save it to your Desktop.
Disable the realtime-protection of your antivirus and anti-malware programs because they might interfere with the scan.
    Start esetsmartinstaller_enu.exe with administartor privileges.
    Select the option Yes, I accept the Terms of Use and click on Start.
    Make sure that the option Remove found threats is checked, and the option Scan archives is checked.
    Now click on Advanced Settings and select the following:
        Scan for potentially unwanted applications
        Scan for potentially unsafe applications
        Enable Anti-Stealth Technology
    Click on Start. The virus signature database will begin to download. This may take some time.
    When completed the Online Scan will begin automatically.
    Note: This scan might take a long time! Please be patient.
    When completed select Uninstall application on close if you so wish
    Now click on Finish

Note: Do not forget to re-enable your antivirus application after running the above scan!

 

Thank you!






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users