Computing.Net > Forums > Security and Virus > zonebac removal

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

zonebac removal

Reply to Message Icon

Name: M.Palmer
Date: March 11, 2008 at 19:58:42 Pacific
OS: hp dv6000
CPU/Ram: amd turion 64, 480 mb ra
Comment:

This started popping up (when the computer first starts) on Feb 10th when Norton said it had stopped a virus and needed to restart the computer to delete the file.

When I start the computer (every time) HP Product Assistant pops-up and stops the progress bar and says it cannot find the file. I click on 'Browse' and It first looks in “My Documents” for the “Redbox.msi” file. I hit cancel and it pops-up 'Error 1706' Then does the same thing again. Then HP Product Assistant closes and re-opens and looks in the folder “System32” and DRVSTORE folder is blue for the same “Redbox.msi” and does the same thing (So it looks a total of 4 times, twice in each folder)

I looked in my Norton History, and have 3 High priority alerts, all on February 10th.
The worst of which appears to be “Trojan.Zonebac detected by Auto-Protect” 35 minutes earlier “jusched was blocked from accessing your network resources” 1 second earlier “Google Toolba… was blocked from accessing your network resources”

Any help to get rid of this is greatly appreciated! Thank you!


M.Palmer



Sponsored Link
Ads by Google

Response Number 1
Name: jabuck
Date: March 12, 2008 at 14:26:18 Pacific
Reply:

Please download and install the latest version of HijackThis v2.0.2:


Download the "HijackThis" Installer from this link:
Hijack This


1. Save " HJTInstall.exe" to your desktop.
2. Double click on HJTInstall.exe to run the program.
3. By default it will install to C:\Program Files\Trend Micro\HijackThis.
4. Accept the license agreement by clicking the "I Accept" button.
5.Click on the "Do a system scan and save a log file" button. It will scan and then ask you to save the log.
6. Click "Save log" to save the log file and then the log will open in Notepad.
7. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
8. Paste the log in your next reply.
9. Do NOT have HijackThis fix anything yet! Most of what it finds will be harmless or even required.

Please download FindAWF from the following link:
http://noahdfear.geekstogo.com/FindAWF.exe


Double-click on the FindAWF.exe file to run it. It will open a command prompt and ask you to "Press any key to continue". You will be presented with a Menu.
1. Press 1 then Enter to scan for bak folders
2. Press 2 then Enter to restore files from bak folders
3. Press 3 then Enter to remove bak folders
4. Press 4 then Enter to reset domain zones
5. Press E then Enter to EXIT
Press 1 then press Enter. Copy and paste the contents of the AWF.txt file in your next reply.


0
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: zonebac removal

trojan zonebac removal for xp www.computing.net/answers/security/trojan-zonebac-removal-for-xp/22373.html

Zonebac Removal - Redbox.msi www.computing.net/answers/security/zonebac-removal-redboxmsi/22488.html

zonebac removal www.computing.net/answers/security/zonebac-removal-/22389.html