paulavac said:
I have 4 files quarantined right now in Trend Micro Internet Security. They
are: 1. IDPSig.zip located in C:\\WINDOWS\system32\ 2. IDPimmData.dll in
C://WINDOWS/system32 3. and 4. A0048359.dll in C:\System Volume
Information\restore{C099B62C-36AA-4956-B829-4984D8D15F2}\RP208\
My Trend Micro Internet Security expires tomorrow and I've tried cleaning
these files several times, to no avail. I don't want to restore them and put
a virus back into my computer, but I'm afraid that if I delete some of these
files, my computer won't work anymore.
Thanks
You have Keyloger installed and Rootkit. Why you didn't contact Trend to
help you remove this infection?
Unexplained computer behaviour may be caused by deceptive software
http://support.microsoft.com/kb/827315
Run a thorough scan by doing the following steps:
Click start >> Control Panel >> Double Click Network and Internet
Connections >> Double click Internet Options, on the IE Properties window
you will see these Options:
General | Security | Privacy | Content | Connections | Programs
| Advanced .
Click on General Tab (1st Tab on the left) and you will see a Button called
[ Clear History ..] click on it to clear your History caches, then click on
[Delete Files..] to delete Internet Files created over the time, click on [
Delete Cookies...] to delete your cookies left by visiting websites.
= Then try to Disable the Add-Ons on your Browser somehow installed on your
browser, On how to disable the Add-ons follow this:
Click on Programs Tab and then click the Manage Add-Ons Button there Disable
the None/Not Verified Plug-ins/Add-ons ( you need to Renable them one-by-one
later and see which is the culprit .
How to manage Add-Ons:
http://support.microsoft.com/kb/883256
Then click on Advanced tab and scroll down to under the Browsing Option:
[&] Browsing
[ ] Enable Third-Party browser extensions (Req Rest) uncheck this box.
Click [OK] to close the IE properties window.
Scan for malware from here:
SuperAntispyware - Free
http://www.superantispyware.com/superantispywarefreevspro.html
http://www.malwarebytes.org/rr-update/rr-free-setup.exe
http://onecare.live.com/site/en-gb/default.htm?s_cid=sah
Run a scan from here on-line:
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Download Avast Cleaner (offline scanner) from here:
http://www.avast.com/eng/avast-virus-cleaner.html
Comodo BOClean : Anti-Malware Version 4.27
http://www.comodo.com/boclean/boclean.html
BlackLight
http://www.f-secure.com/en_EMEA/security/security-lab/tools-and-services/blacklight/
BlackLight
ftp://ftp.f-secure.com/anti-virus/tools/fsbl.exe
Easy Clean
http://www.f-secure.com/en_EMEA/security/security-center/easy-clean/
If you want further help, try the hijackthis tool.
Download the Hijackthis and send the report to one of
many forums for analysis and troubleshooting or you can send it to me on my
email provided at the bottom:
When all else fails, HijackThis v2.0.2
(
http://www.trendsecure.com/portal/en-US/threat_analytics/hijackthis.php)
Can you please send me a copy at (e-mail address removed) ,
remove the obvious (REMOVETHISCAPS) to email me, note ( _ it is underscore
not - ).
HTH,
nass