re: Hijack this scan result
Saturday, January 8, 2005 at 3:58 am Windows Me Annoyances Discussion Forum
Posted by Allan
(22 messages posted)
Hi Carol,
I'm working on this; so far I've run online RAV scan, it found:
process://C:\WINDOWS\SYSTEM\MAPISVC32.EXE - Backdoor:Win32/VB.KX -> Infected
c:\WINDOWS\SYSTEM\mapisvc32.exe - Backdoor:Win32/VB.KX -> Infected
c:\WINDOWS\Temporary Internet Files\Content.IE5\I1O7QLQ5\hijackthis050107.txt - Exploit:HTML/MhtRedir.gen*
-> Infected
c:\My Documents\AB Program Files\freehistorycleaner.exe->[setuf]->mapisvc32.exe -
Backdoor:Win32/VB.KX -> Infected
I don't think it removed the files even though I had autoclean selected.
Interestingly though I ran a full AV scan with my up to date Trendmicro Antivirus
and it came up clean, including mapisvc32.exe.
I'm don't know how to recognise the malicious code to remove it.
Just to clarify, are you suggesting that I run HJT again? What do I look for?
Will opening the log not just reinfect the PC?
I had no idea written text could be so dangerous.
How do I block such script from getting on my PC?
I ran McAfee Stinger in safe mode, it didn't find anything.
I am unable to run an online scan on the problem PC as an internet connection won't
run long enough to download the files.
Is there a complete package of some sort I could download onto a CD to then copy
over onto the problem PC so I can scan it properly. I really want to backup the personal
files and need to make sure they're clean.
Haven't had time to run BitDefender Online Virus Scan, will do that next.
Thanks again
Allan
|
All messages in this thread [show all]
 |  |  |  |  |  |  | re: Hijack this scan result (Allan: Sat, Jan 8, 2005, 3:58 am) |
| |
| |
Return to the Windows Me Discussion Forum
|
|