Members
  • Total Members: 14176
  • Latest: toxxxa
Stats
  • Total Posts: 43031
  • Total Topics: 16217
  • Online Today: 5570
  • Online Ever: 51419
  • (01. January 2010., 10:27:49)









Author Topic: iifcbx.dll detected as Virus HELP!!!! (Vundo!go, remove, clean, delete, fix)  (Read 34023 times)

0 Members and 1 Guest are viewing this topic.

amko_sa

  • SCF VIP Member
  • *****
  • Posts: 88
  • KARMA: 15
  • Gender: Male
    • Newsapp IT support Portal
and one more solution:

Please download ComboFix from this locations:

Link

and save to your desktop.

This is from author of this software:

Important!
You should NOT use Combofix unless you have been instructed to do so by a Malware Removal Expert.
It is intended by its creator to be used under the guidance and supervision of an Malware Removal Expert, not for private use.
Using this tool incorrectly could lead to disastrous problems with your operating system such as preventing it from ever starting again.


Scan your computer with combofix and after that please copy and paste the contents of C:\ComboFix.txt in your next reply.

Samker's Computer Forum - SCforum.info


Gerald309

  • Guest
@ Samker here is log file for SUPERAntiSpyware

http://aict.agilityhoster.com/SUPERAntiSpyware%20Scan%20Log.log


While awaiting Log analysis you may want to try a very easy quick check for botnet infection ...... all you have to do is hit the link and results on next page are instant either good or bad ..... (please report if so)
Online Tool Developed to Check for Botnet Activity   [wrkx w/ Netbooks]
BotnetChecker.Com
Go To: http://botnetchecker.com/

or also can install.... (free trend micro) ...
RUBotted
http://free.antivirus.com/rubotted/

ibu

  • SCF Member
  • **
  • Posts: 56
  • KARMA: 5
@Gerald Bot checker says

Bot Activity


Bot traffic from IP was not detected in our honeynets.
Please check back any time your computer is acting up.

Samker

  • SCF Administrator
  • *****
  • Posts: 7528
  • KARMA: 322
  • Gender: Male
  • Whatever doesn't kill us makes us stronger.
    • SCforum.info - Samker's Computer Forum
@ Samker here is log file for SUPERAntiSpyware

http://aict.agilityhoster.com/SUPERAntiSpyware%20Scan%20Log.log

It's say that you have 70 "File threats detected", you'll need to remove them with SUPERAntiSpyware and continue with next steps.

I'll wait your final logs from BitDefender and HijackThis and after that give you next instructions...




ibu

  • SCF Member
  • **
  • Posts: 56
  • KARMA: 5
@ Samker here is log file for SUPERAntiSpyware

http://aict.agilityhoster.com/SUPERAntiSpyware%20Scan%20Log.log

It's say that you have 70 "File threats detected", you'll need to remove them with SUPERAntiSpyware and continue with next steps.

I'll wait your final logs from BitDefender and HijackThis and after that give you next instructions...





Write now im scanning with Malwartebytes

Samker's Computer Forum - SCforum.info


ibu

  • SCF Member
  • **
  • Posts: 56
  • KARMA: 5
Super antispyware result


Samker

  • SCF Administrator
  • *****
  • Posts: 7528
  • KARMA: 322
  • Gender: Male
  • Whatever doesn't kill us makes us stronger.
    • SCforum.info - Samker's Computer Forum
Super antispyware result

http://img375.imageshack.us/img375/4365/super.png

Ok, that's good. ;)

Delete everything and continue with next step...


Gerald309

  • Guest
@Gerald Bot checker says

Bot Activity


Bot traffic from IP was not detected in our honeynets.
Please check back any time your computer is acting up.


Good ! Botnet infections are generally built in stealth a piece at a time and communicate back which should have been detected. The RUBotted will monitor if was previously silent as incomplete. It can all start with a downloader trojan and so forth for a full payload. make sure when done here to grab a anti-rootkit scanner and perform scans. There are a handful free to the public .... I have a list about mid-page here:
http://www.bluecollarpc.org/Spyware_Removal_Center.php

(Rootkits, if left unchecked, can install malware at will after hiding from known security software products.)

ibu

  • SCF Member
  • **
  • Posts: 56
  • KARMA: 5
rubotted requires me to restart i will restart after im done with the steps Samker told me

Gerald309

  • Guest
rubotted requires me to restart i will restart after im done with the steps Samker told me

Yes. This was meant after a successful removal of the threats currently. You should add a "internet tracks / history cleaner" after all done here as there are some various leaking bad cookies noticed. Best security set up is to never store cookies allowing only "session cookies" (like log in cookies) setting all browsers to delete all temporary history automatically when the browser closes.

CCleaner is very popular and very good and very free.....
http://www.piriform.com/ccleaner

If you do not have antispyware with real time protection onboard - the free Micrsoft Windows Defender is strongly recommended with superior defending shields rivaling shareware products (pay, subscription) such as industry leader webroot Spysweeper. These will block the spyware catagory of threats (which includes bad cookies such as tracking cookies) from installing onto the system - "drive by installations" (infection via visiting bad infected website)
Windows Defender
http://www.microsoft.com/athome/security/spyware/software/default.mspx

Samker's Computer Forum - SCforum.info


 

Enter your email address to receive daily email with 'SCforum.info - Samker's Computer Forum' newest content:

Terms of Use | Privacy Policy | Advertising