Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Continually getting new infections

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: Continually getting new infections

Unread postby askey127 » February 15th, 2008, 7:20 pm

-----------------------------------------------------------
Press Start, Programs, Accessories, Command prompt, copy/paste the following command into the box and press OK:
(I am a little unsure about how to get a command line in Vista. You probably know).
cmd /c dir C:\*.* /L /A /B /S|Find "lich" >> "%userprofile%\desktop\look.txt"

A file called look.txt should appear on your Desktop. Please post the contents of this file.

We will kill all the files that show up
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 14025
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA
Advertisement
Register to Remove

Re: Continually getting new infections

Unread postby askey127 » February 15th, 2008, 8:06 pm

Crunge,
Please try to run in Normal mode.
It may not remove all, but it should report the ones that fail.

EDIT: If the script won't run in safe mode due to an os check, it won't run in normal either. Sorry for the Homer moment.
lich.exe and lich.sys are downloaders and need to go. There may be others. It's clear some of the tools we have don't work in Vista.


Can you try a Kaspersky scan? If we can ID the downloader(s) properly we can kill them. Kaspersky will need permission from Comodo and Vista to run an ActiveX..
Normal Instructions are here:

Using Internet Explorer, Please Do an Online Scan with Kaspersky WebScanner.
Go here to run an online scanner from Kaspersky.
  • Click on "Kaspersky Online Scanner"
  • A new smaller window will pop up. Press on "Accept". After reading the contents.
  • Now Kaspersky will update the anti-virus database. Let it run.
  • Click on "Next">"Scan Settings", and make sure the database is set to "extended". And check both the scan options. Then click OK.
  • Then click on "My Computer", and the scan will start.
  • Once finished, save the log to your Desktop as filename KAV.txt
Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the license, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license is accepted, reset to 100%.
If the file KAV.txt appears to be too large to post (more than a couple hundred lines), let me know and I will give you instructions that will convert it to a smaller file.


askey127
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 14025
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA

Re: Continually getting new infections

Unread postby Crunge » February 19th, 2008, 10:57 pm

Askey127,

Sorry for the delay but I'm on the road and won't have access to that machine again until this weekend. I'll follow your suggestions and post updates then.
Crunge
Active Member
 
Posts: 12
Joined: February 6th, 2008, 10:57 am

Re: Continually getting new infections

Unread postby askey127 » March 1st, 2008, 8:51 am

This topic is now closed due to inactivity. If you wish it to be reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

If it has been 10 days or more since your last post, and the helper assisting you posted a response to which you did not reply, this topic will not be reopened. If you still require help, please start a new topic and include a fresh HijackThis log and a link to this thread in your new topic.

You can help support this site from this link :
Donations For Malware Removal

Please do not contact us to reopen this topic if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 14025
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA

Re: Continually getting new infections

Unread postby askey127 » March 2nd, 2008, 11:37 am

Re-opened at the request of the poster.

edit: replied to second open thread. This one archived again.-askey
User avatar
askey127
Admin/Teacher
Admin/Teacher
 
Posts: 14025
Joined: April 17th, 2005, 3:25 pm
Location: New Hampshire USA
Advertisement
Register to Remove

Previous

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 312 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware