Home > Need Help > Need Help Please.trj/downloader.gk

Need Help Please.trj/downloader.gk

This is a work/home computer and our tech has that on so that he can edit my computer remotely. To fix all the bad critical objects do the following: Right click on one of them to open up the selection screen. There was like 6-7 in d drive that would not allow me to. "Cannot read from source file or disk" is what that said. After that you may delete that file if you want. http://magicnewspaper.com/need-help/need-help-with-js-downloader-aud.html

Then click on the second button on the top. Incident Status Location Virus:Trj/Downloader.GK No disinfected C:\WINDOWS\TEMP\THIBDD.TMP\localNrd.cab[polall1l.exe] Virus:Trj/Downloader.GK No disinfected C:\WINDOWS\TEMP\THI7428.TMP\localNrd.cab[polall1l.exe] Virus:Exploit/iFrame Disinfected C:\WINDOWS\Temporary Internet Files\Content.IE5\UV0JILQN\wbk372.TMP Virus:Exploit/iFrame Disinfected C:\WINDOWS\Temporary Internet Files\Content.IE5\UV0JILQN\wbk1062.TMP hope someone can make more sense of that than me... When all are selected Click "Next" and then "OK" in the pop-up window to confirm the removal. Create a folder at C:\HJT and move HijackThis.exe there.

If it's clean, it will say Status System Clean. REbooted in safemode, and cleaned with cleanmgr.And after running a search, WinVNC is on this computer.What is WINVNC? In the long run you will learn alot about your pc. Please deselect "Search for negligible risk entries", as negligible risk entries (MRU's) are not considered to be a threat.

I believe it can be removed from Add/Remove Progs. Reboot into Normal Mode and post a new HijackThis log file so we can make sure it's clean. __________________ GO BIG BLUE!! 11-29-2004, 12:17 PM #5 vrock22 Registered Member Click Save at the bottom. There is no left and right pane either so I am unable to see the advanced button or the all files and folders button.

Click OK. Also make sure that Display the contents of System Folders' is checked. Chaslang or I will try to check back when we get a chance. Sign Up Now!

P4-3.0G - Seagate Barracuda 160 - Maxtor 120 - Antec Hard Drive Cooler - 1GRam - Radeon9800Pro - Sony Multi DriveDVDRW - Audigy2 6.1 - XPHome Reply With Quote 09-27-200412:07 PM Thank You. When a scan is completed the Performing System Scan screen will change name to "Scan Complete". Let it fix everything it asks about.run two online virus scans from any of the following locations and post a summary of their findings in your next reply.

Back to top #12 whileweburn whileweburn Topic Starter Members 28 posts OFFLINE Local time:01:42 AM Posted 12 March 2005 - 05:48 PM I dont think I should delete it. PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics) Social: Click Next and it will tell you that after the next reboot/restart the file should run by itself and clean out the temp folders. Try hijackthis first, otherwise try adaware in safe mode and a full av scan in safe mode.

Newer Than: Search this thread only Search this forum only Display results as threads Useful Searches Recent Posts More... if not let me know and we will remove it.then reboot and post a fresh Hijackthis log. Alilynn posted Feb 10, 2017 at 11:24 PM Loading... O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O8 - Extra context menu item: Web Rebates -

Winsock Fix Utility http://www.dfwonline.net/files/WinsockFix.zip Also......... Back to top #15 mpfeif101 mpfeif101 Advanced Member Advanced Member 776 posts Posted 17 October 2004 - 05:02 PM Reformatting isn't always the answer. go to run (while in safemode) then type in all the locations. I only deleted the c:/windows.Logfile of HijackThis v1.99.1Scan saved at 3:46:17 PM, on 3/11/2005Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\System32\ibmpmsvc.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\system32\spoolsv.exeC:\Program

but I can't seem to find the file I want as there seems to be some legitimate stuff in my "run" file. Advertisements do not imply our endorsement of that product or service. Follow InProfiles advice.

Please re-enable javascript to access full functionality.

I don't mean to be rude or unkind but if you can't turn off System Restore and remove temp files, which is where your viruses are being stored, then how do Open up the Cleaning Engine section and make sure all of the following are On with a "green" checkmark: Always try to unload modules before deletion During Removal, unload Explorer and To make sure it's cleaned out, go into My Computer->C: Drive and double click on the run.bat file. Go to this site to get the plug-in for fixing VX2 variants.

Click Apply and then OK. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged Back to top #11 bricat bricat Members 205 posts OFFLINE Gender:Male Local time:07:42 AM Posted 12 March 2005 - 03:28 PM if you don't know what winvnc is then you Windows XP's search feature is a little different.

It takes just 2 minutes to sign up (and it's free!). After we are finished with your log file and verified that it's clean, you may turn it back on and create a new restore point. If it asks if you want to delete a certain random file, choose No and post that filename here. Similar Threads Please, Please help my Slow IE6 Julie M, Aug 6, 2003, in forum: Windows XP Internet Explorer Replies: 0 Views: 284 Julie M Aug 6, 2003 PLEASE,PLEASE..."This Page Cannot