PDA

View Full Version : Exploit.WMF



Pipper
2006-09-22, 10:38
I have come into this situation about 1/2 way through so I'm not too sure exactly what has and has not been done. What I do know is that avg has detected Exploit.WMF on a second computer at home here and is quite possibley related to this address "IE5\RZ93R5GW\CYBER(1).WMF"

Symptoms:
no access to internet only some incomplete page that seems like a search engine of some sort for porn

attempeted fixes that I know of were contacted net provider to confirm net connection and then they were on the phone for a couple hours trying to figure out what the problem was because everything seemed to be working fine on their end of things I can probably get the start up information but I will have to transfer my DVD burner to the other computer to get it to you

if there is anything else I can do please let me know thank-you very much for your service and help on this matter

ps. more companies should have a service like this but I guess that is what makes Spy-Bot the best (and you know you are)

LonnyRJones
2006-09-24, 10:21
Hello

Other than suggesting running your antivirus and SpyBot while the PC is in safe mode there is nothing else i can do until we see a log from hijackthis.

First Make a new folder, example C:\AntiSpyWare
and download/Save HijackThis, to that new folder.
This is necessary to ensure you have backups should anything go wrong
http://www.merijn.org/files/HijackThis.exe
Double click HijackThis.exe, Hit None of the above, just start the program.
Hit Scan When the scan is finished, the "Scan" button will change into a "Save Log" button. Press that, save the log somewhere, and please show us its contents.
Most of what it lists will be harmless or even required, so do NOT fix anything yet.

tashi
2006-09-28, 22:31
Still with us Pipper?

tashi
2006-10-04, 19:42
As the information requested has not been provided, this topic has been archived.

If you need it re-opened please send me a private message (pm) and provide a link to the thread; this applies only to the original topic starter.