This thread's last reply is from August 4, 2010, 7:23 PM UTC. Software, malware, and removal-tool
advice below may be out of date — treat specific steps and download links with caution.
Note: If using Mozilla Firefox you will need to download esetsmartinstaller_enu.exe when prompted then double click on it to install. All of the below instructions are compatible with either Internet Explorer or Mozilla FireFox.
Select the option YES, I accept the Terms of Use then click on:
When prompted allow the Add-On/Active X to install.
Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
Now click on Advanced Settings and select the following:
Scan for potentially unwanted applications
Scan for potentially unsafe applications
Enable Anti-Stealth Technology
Now click on:
The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
When completed the Online Scan will begin automatically.
Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
When completed select Uninstall application on close if you so wish, make sure you copy the logfile first!
Now click on:
Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
ESET would not run on the effected computer,,followed your instructions and it opened a new screen, light blue in color but did not seem to do anything. Light blue page is totally blank except for a tiny white box woth a red x in the upper left corner of the page. Not sure if this is an issue,,,but at this point it appears that I have no Java running on that computer. Was instructed to delete previous versions of Java in preparation for the updated version that has refused to load.
finally got Java to load on the affected computer, the Java test says its working now. Checked a movie clip on youtube and those still wont play,,, tried downloading an update to the inbedded player as suggested on the sire, but it returned a message that it could not find the site.
Prior to getting it installed I ran RKILL,,,there was nothing listed on the report.
Kaspersky online scanner is now working,,,running it now and will have a report when its done.
KASPERSKY ONLINE SCANNER 7.0: scan report
Monday, August 2, 2010
Operating system: Microsoft Windows XP Professional Service Pack 3 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Monday, August 02, 2010 15:12:43
Records in database: 4162558
Scan settings
scan using the following database extended
Scan archives yes
Scan e-mail databases yes
Scan area My Computer
C:\
D:\
E:\
F:\
G:\
H:\
I:\
J:\
K:\
Scan statistics
Objects scanned 268913
Threats found 5
Infected objects found 6
Suspicious objects found 0
Scan duration 04:21:40
File name Threat Threats count
C:\Documents and Settings\HP_Administrator\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst Infected: Trojan.HTML.Agent.dc 1
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\hQMy.exe Infected: Trojan.Win32.FakeAV.aw 1
We need to remove the viruses that Kaspersky detected.
Run OTL Script
Double-click OTL.exe to start the program.
Copy and Paste the following code into the textbox. Do not include the word Code
:files
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\hQMy.exe
C:\WINDOWS\Temp\jar_cache3301456097426842156.tmp
:commands
[EMPTYTEMP]
Then click the Run Fix button at the top.
Click.
OTL may ask to reboot the machine. Please do so if asked.
The report should appear in Notepad after the reboot.Copy and Paste that report in your next reply.
Outlook
There are infected emails in your Outlook storage file. Please check though your emails to see if there are any emails with attachments and delete any attachments that you do not recognise and cannot trust.
Once this is done then please empty deleted items and then compact the file File - Data File Management - highlight file - Settings - Compact Now.
Next run another Kaspersky scan. This may need to be done several times until the infected email can be eliminated.
On the restart after running OLT,,, the windows screen (the one before the sign-in screen) opened for a few seconds, then went to a full screen of colored boxes, then a second pattern of colored small shapes,, the mouse is working, but it has stopped loading windows.
Boot into Safe Mode:
Restart your computer and immediately begin tapping the F8 key on your keyboard.
If done right a Windows Advanced Options menu will appear. Select the Safe Mode option and press Enter.
Please run a new scan with OTL and post the contents of OTL.TXT
Was tapping F8 but it bypassed and went directly to a normal boot up,,,which worked normally, not sure what had happened. Below is the log for OLT from just before the re-boot. Do you still want another OLT scan run?
All processes killed
========== FILES ==========
C:\Documents and Settings\HP_Administrator\Local Settings\Temp\hQMy.exe moved successfully.
C:\WINDOWS\Temp\jar_cache3301456097426842156.tmp moved successfully.
========== COMMANDS ==========
OTL by OldTimer - Version 3.2.9.1 log created on 08032010_083347
Files\Folders moved on Reboot...
File\Folder C:\Documents and Settings\HP_Administrator\Local Settings\Temp\hsperfdata_HP_Administrator\3964 not found!
I sincerely appreciate your work and patience. This is am amazing service you provide.
✨ Ask AI about this thread
No ads, no affiliate links — generated on request from this thread's own
archived content, not written by forum staff. Never run a scan/removal tool
as a self-service step if the original thread describes it being done under
a helper's direct supervision, and don't include your name, email, or other
personal details in a follow-up question. See our privacy page
for details on how this works.
textbox. Do not include the word Code
.