1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Lineag-AFF mal/packer

Discussion in 'Windows - Virus and spyware problems' started by teisr, Sep 3, 2007.

  1. teisr

    teisr Guest

    ok, my wifes laptop (which i am using as i type this) became infected with this trojan just a few days ago, can i get some help? webroot w/ antivirus cannot quarantine.
     
  2. rav009

    rav009 Active member

    Joined:
    Nov 14, 2005
    Messages:
    2,205
    Likes Received:
    0
    Trophy Points:
    66
    =============================
    Step 1
    =============================

    *Go Start > Control Panel.

    *Double-click Internet Options.

    *Under Temporary Internet Files, click the Settings button.

    *Click the View Files button.

    *Press CTRL+A to select all files.

    *Press DEL or click the Delete option at the top of the window.

    *Click the Yes button on the dialog box that appears.

    *After all the files are gone, close the window.

    *Click OK two times.

    *Close Control Panel.

    And.....

    ATF-Cleaner

    Please download ATF Cleaner by Atribune from here. Double-click ATF-Cleaner.exe to run the program.
    Under Main choose: Select All
    Click the Empty Selected button.

    =============================
    Step 2
    =============================

    Install Ad-Aware and scan your computer

    http://www.lavasoft.com/software/adaware/

    - Download the Ad-Aware installation file from this link
    - Run the installer and install with default options
    - Start the program, if you are asked if you wish to update the definitions file, then say yes, and go ahead with the update
    - If you are not asked, press Check for updates now and update the definitions file
    - Next, press the Start, choose Perform full system scan, de-select Search for negligible risk entries, and check Search for low-risk threats is selected, then press Next
    - When the scan is complete, press Next and select the Critical Objects tab, right-click inside the window and choose Select All Objects, then select next, and confirm the removal.
    - Close Ad-Aware

    =============================
    Step 3
    =============================

    Install and configure AVG Anti-Spyware

    Click here to download it

    This is the one you want:

    [​IMG]

    * Install AVG Anti Spyware
    * Double-click the icon on Desktop to launch AVG
    * On the main Status screen, under Your Computer's Security, click Resident Shield
    * Click the word active to change it to inactive
    * On the top of the main screen click Update.
    * Then click on Start Update. The update will start and a progress bar will show the updates being installed.
    * Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
    * Once in the Settings screen click on "Recommended actions" and then select "Quarantine".
    * Under "Reports"
    o Select "Do Not Automatically generate report after every scan"

    When you have finished updating, do this:

    ______________________________

    Run AVG Anti-Spyware with it's updated definitions...it's important that all windows must be closed.

    * Click Scanner
    * Click on the Scan tab
    * Click Complete System Scan to begin scanning.
    Once the scan is complete do the following:
    * If you have any infections you will prompted, then select "Apply all actions"
    * Once finished, click the Save report button, then click Save Report As and save it to your desktop. (make sure to remember where you saved that file, this is important).

    Now Close AVG Anti-Spyware.

    =============================
    Step 5
    =============================

    Install Spybot S&D and scan your computer

    http://www.safer-networking.org/en/mirrors/index.html

    - Download the Spybot S&D installation file from this link
    - Run the installer and install with default options
    - Start the program, select Search for Updates
    - A list of updates should appear, right-click the list and select Select All, then click Download Updates near the top
    - Next, click Search & Destroy from the toolbar on the left side, and then click Check for problems from the top
    - When the scan is complete, place a check mark in the box next to all entries marked in red, and press Fix selected problems
    - Close Spybot S&D

    =============================
    Step 6
    =============================

    Now I would like you to run an online scan, from here http://www.trendmicro.com/hc_intro/default.asp.

    1. Once up click on "Scan now. It's Free"
    2. Read the Term & Use and check "Yes, I accept the Terms of Use" and then click on "Launching HouseCall"
    3. Quick Select: "Scan complete computer for Malware, grayware and vulnerabilities" click "Next"
    4. Let Housecall go through ALL three "Steps". It can take upto 30 minutes or more to scan.
    5. Please do not use your computer whilst the scan is in progress.
    6. Once the scan is done select "clean all detected infections automatically"
    7. For detected HTTP cookies, select "Remove all deteccted cookies". And click "Clean Now"
    8. Then a message will come up; click "OK" and let it delete the selected infections.
    9. During the clean up. Note any infected files down into a .txt file in Notepad. Ready to post in your next reply.
    10. When asked to perforn a full scan again click "No". And restart your computer.

    =============================
    Step 7
    =============================

    ComboFix

    1. Download ComboFix by sUB combofix.exe
    2. Double click combofix.exe & follow the prompts.
    3. When finished, it shall produce a log for you. Post that log in your next reply.

    Note:
    Do not mouseclick combofix's window whilst it's running. That may cause it to stall.

    =============================
    Step 8
    =============================

    Open your add/remove programs tab and remove any of the following programs if you find them listed. These are all malware (spyware/adware) entry’s that may appear in the add/remove programs tab so IF you find the entry...uninstall the program.

    180 Search Assistant
    180Solutions
    Active alert
    Ad Service
    AdTools
    AdTools Service
    Alexa toolbar
    BargainBuddy
    Bullseye Networks
    CashBack
    cosmi
    DH
    EasySearchBar
    Elite Sidebar
    Elite Toolbar
    Freeze Clip Art
    GAIN
    Gator
    Hotbar Outlook Tools
    Hotbar Web Tools
    HuntBar
    Internet Optimizer
    ISTbar
    ISTSvc
    MaxiFiles
    Media Access
    Media Gateway
    MySearch
    MyWay Search Bar
    MyWebSearch
    NavExcel Search Toolbar
    NavHelper
    ncase
    Oemji Toolbar
    Open Site
    Preview AdService
    Search Toolbar (HuntBar/WinTools)
    ShopperReports by Hotbar
    Sidefind
    SideSearch
    Slotchbar
    Software Update Manager
    SurfAccuracy
    SurfSideKick
    Upspiral Toolbar
    TurboDownload
    VBouncer
    Viewpoint
    Viewpoint Manager
    Viewpoint Media Player
    WareOut
    WeatherBug
    Web Rebates
    Web Search Toolbar (WinTools)
    Webhancer
    WhenU (any entry)
    WeirdOnTheWeb
    Windows AdService
    Windows AdStatus
    Windows ServeAd
    WinTools
    WinTools Easy Installer
    WSEM Update


    These are Optional removals but we recommend you remove them as well.

    Download Accelerator Plus
    Kazaa
    Kontiki
    Messenger Plus
    NetPumper
    NewDotNet
    P2P Networking
    StarWare
    WildTangent


    =============================
    Step 9
    =============================

    Visit http://windowsupdate.microsoft.com/

    Check for updates & install all updates found.
     
  3. ddp

    ddp Moderator Staff Member

    Joined:
    Oct 15, 2004
    Messages:
    39,011
    Likes Received:
    77
    Trophy Points:
    128
    moved to correct forum
     
  4. teisr

    teisr Guest

    combofix.exe is 404 not found
     

Share This Page