What's new Search

Recent content by ot008239

O
[SOLVED] Arte,is Trojan

PC appears stable now, I am currently backing it up. Thank you for all your efforts, I'll have to lock the PC down more as it is used by the kids. Regards OT008239
- ot008239
- Post #52
- Jul 27, 2015
- Forum: Security Arena
O
[SOLVED] Arte,is Trojan

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:26-07-2015 Ran by Thomas (administrator) on TRUSTNO1 (26-07-2015 18:30:53) Running from C:\Users\Thomas\Desktop Loaded Profiles: Thomas (Available Profiles: Thomas & Orrin JNR & Guest) Platform: Windows 7 Home Premium Service Pack 1...
- ot008239
- Post #50
- Jul 27, 2015
- Forum: Security Arena
O
[SOLVED] Arte,is Trojan

I completely accept your advice and guidence, I have removed uTorrent. I shall post frst64 log in my next post Regards OT008239 11:54:25.0280 0x09e0 TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57 11:54:28.0930 0x09e0 ============================================================...
- ot008239
- Post #49
- Jul 27, 2015
- Forum: Security Arena
O
[SOLVED] Arte,is Trojan

Corrine Actions taken: Ran second MBR - Clean result; Ran frst64 - logs listed below. Frst64 - FRST.txt Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:26-07-2015 Ran by Thomas (administrator) on TRUSTNO1 (26-07-2015 18:30:53) Running from C:\Users\Thomas\Desktop Loaded...
- ot008239
- Post #47
- Jul 26, 2015
- Forum: Security Arena
O
[SOLVED] Arte,is Trojan

Greetings Corrine\DonnaB Gosh I thought MBR had hung, it took hours but found and resolved 7 trojans; the attached log refers. Running second MBR scan now. ETA:- Highlighted text below --------------------------------------- Malwarebytes Anti-Rootkit BETA 1.09.1.1004 (c) Malwarebytes...
- ot008239
- Post #45
- Jul 26, 2015
- Forum: Security Arena
O
[SOLVED] Arte,is Trojan

Followed the link below which has worked inasmuch that I have successfully started windows and I am currently running MalwareBytes. https://support.microsoft.com/en-us/kb/927392
- ot008239
- Post #41
- Jul 26, 2015
- Forum: Security Arena
O
[SOLVED] Arte,is Trojan

No just the standard Signatre 07: Corrupt file
- ot008239
- Post #40
- Jul 26, 2015
- Forum: Security Arena
O
[SOLVED] Arte,is Trojan

No difference; Signature 07: Corrupt file.
- ot008239
- Post #38
- Jul 25, 2015
- Forum: Security Arena
O
[SOLVED] Arte,is Trojan

Not sure what the other devices are, this could relate to Dell desktop PC default setup, not sure. Portable drives and DVD were removed but x:\ still exist. No change in boot process. Command prompt after reboot is always x:\ not C:\
- ot008239
- Post #36
- Jul 25, 2015
- Forum: Security Arena
O
[SOLVED] Arte,is Trojan

Corrine\DonnaB Oh Gawd!! Thought they were dodgy files, I guess that explains why they have re-appeared. Excuse the Brit slang!! ETA:- I have tried booting from Windows DVD and tried restoring to no avail.
- ot008239
- Post #34
- Jul 25, 2015
- Forum: Security Arena
O
[SOLVED] Arte,is Trojan

Re: Artemis Trojan Suspect and or respawning files are highlighted below, I have removed via frst64. Not sure what X: is; the toshiba is my portable disk. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-07-2015 Ran by SYSTEM on MININT-2IIKUDD on 25-07-2015 17:37:01 Running...
- ot008239
- Post #31
- Jul 25, 2015
- Forum: Security Arena
O
[SOLVED] Arte,is Trojan

Sorry our post did cross. It appears this virus is being respawned via the boot process as random files are appearing each time I boot. fixing the MBR via the usual method doesn't have the desired affect.
- ot008239
- Post #29
- Jul 25, 2015
- Forum: Security Arena
O
[SOLVED] Arte,is Trojan

I have deleted that entry but the loop continues signature 07. Latest report: Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:20-07-2015 Ran by SYSTEM on MININT-2IIKUDD on 25-07-2015 17:37:01 Running from C:\ Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language...
- ot008239
- Post #27
- Jul 25, 2015
- Forum: Security Arena
O
[SOLVED] Arte,is Trojan

Yes it is still reporting Signature 07 etc. However, apologies as this probably has nothing to do with my ongoing issues; what is this entries function? HKLM\...\RunOnce: [*Restore] => C:\Windows\system32\rstrui.exe [296960 2015-05-25] (Microsoft Corporation) What is being restored?
- ot008239
- Post #25
- Jul 25, 2015
- Forum: Security Arena
O
[SOLVED] Arte,is Trojan

I was wondering about this entry, trying to understand why it would be required to run? HKLM\...\RunOnce: [*Restore] => C:\Windows\system32\rstrui.exe [296960 2015-05-25] (Microsoft Corporation)
- ot008239
- Post #23
- Jul 25, 2015
- Forum: Security Arena

ot008239