Re: got this trojan in a file called mscmsr.dll - don't know where



From: <lukszkl@xxxxxxxxx>

| I've got the same virus now. It's name is Win32:Agent-TVS and it's in
| file mscmsr.dll



1. Download and execute HiJack This! (HJT)
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe

2. Disable Notepad's word wrap:
In Notepad.exe; Format --> uncheck; "Word wrap"

3. Download/run Deckard's System Scanner:
http://www.techsupportforum.com/sectools/Deckard/dss.exe

4. Save the scan results (Main.txt and Extra.txt)

5. And then post the contents of Main.txt and Extra.txt in your post in one of the below
expert forums...


{ Please - Do NOT post the HJT and Deckard's System Scanner Logs here ! }

Forums where you can get expert advice for HiJack This! (HJT) and Deckard's System Scanner
Logs.

NOTE: Registration is REQUIRED in any of the below before posting a log

Suggested primary:
http://www.thespykiller.co.uk/index.php?board=3.0

Suggested secondary:
http://www.bleepingcomputer.com/forums/forum22.html
http://castlecops.com/forum67.html

Suggested tertiary:
http://www.dslreports.com/forum/cleanup
http://www.cybertechhelp.com/forums/forumdisplay.php?f=25
http://www.atribune.org/forums/index.php?showforum=9
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html
http://gladiator-antivirus.com/forum/index.php?showforum=170
http://forum.networktechs.com/forumdisplay.php?f=130
http://forums.maddoktor2.com/index.php?showforum=17
http://www.spywarewarrior.com/viewforum.php?f=5
http://forums.spywareinfo.com/index.php?showforum=18
http://forums.techguy.org/f54-s.html
http://forums.tomcoyote.org/index.php?showforum=27
http://forums.subratam.org/index.php?showforum=7
http://www.5starsupport.com/ipboard/index.php?showforum=18
http://www.malwarebytes.org/forums/index.php?showforum=7
http://makephpbb.com/phpbb/viewforum.php?f=2
http://forums.techguy.org/54-security/
http://forums.security-central.us/forumdisplay.php?f=13


--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp


.



Relevant Pages

  • Re: win antivirus pro - any definitive removal instructions yet?
    ... Download and execute HiJack This! ... (HJT) ... Logs. ...
    (microsoft.public.security.virus)
  • Re: Trojan Help
    ... Doctor and Avast all installed and it removes the trojans but they seem to ... 3.Download and execute HiJack This! ... do not post HJT logs to this newsgroup. ...
    (alt.comp.anti-virus)
  • Re: Question Multi A/V Tool
    ... Download and execute HiJack This! ... (HJT) ... Download/run Deckard's System Scanner: ... Logs. ...
    (microsoft.public.security.virus)
  • Re: MVPS HOSTs file changed unexpectidely?
    ... Download and execute HiJack This! ... Create a HJT log file and post it in one of the below locations... ...
    (alt.computer.security)
  • Re: my windows xp frozen
    ... | purity virus" and is now frozen.Need help? ... Download and execute HiJack This! ... Create a HJT log file and post it in one of the below locations... ...
    (microsoft.public.security.virus)