Options

msnavpklog.txt advpack.dll infection

Hi. A friend's computer has a nasty infection: 4 GB msnavpklog.txt and it contains what purports to be the loaded or unloaded status of advpack.dll to the tune of several KB every 3 seconds.
Norton Internet Security didn't detect it.
McAfee didn't detect it.
TrendMicro didn't detect it.
Web search indicates only a few threads on it, with different trojan names and behaviors. (haven't ever seen a picture of anything as a result of this infection.) File can be deleted by setting the attribute to read only. Then in seconds the file is back and growing. c:\windows\msnavpklog.txt
Windows XP Home SP 3.
Can anyone help me with this?
The Wheel (unicycle)

Comments

  • VekaVeka Finland
    edited December 2008
    Hi, welcome to Icrontic.

    Step 1:

    Please download following tools to your desktop:
    Step 2:
    Run MBAM
    • Double-click mbam-setup.exe and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to:
      • Update Malwarebytes' Anti-Malware
      • Launch Malwarebytes' Anti-Malware
    • Then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, select Perform full scan, then click Scan.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Be sure that everything is checked, and click Remove Selected.
    • When completed, a log will open in Notepad. please copy and paste the log into your next reply.
    • If you accidently close it, the log file is saved here and will be named like this: C:\Documents and Settings\<your username>\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt
    IMPORTANT: Reboot your computer after the scan.

    Step 3:
    Run RSIT

    • Double click on RSIT.exe to run RSIT.
    • Click Continue at the disclaimer screen.
    • Once it has finished, two logs will open.
    • Please post the contents of both log.txt (will be maximized) and info.txt (will be minimized)

    In your next reply, please include the results of MBAM and both RSIT logs.
  • VekaVeka Finland
    edited December 2008
    This topic is now closed due to inactivity. If you wish to reopen your topic, please send a Private Message (PM) to Trogan with a link to your thread.

    If it has been 10 days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, this topic will not be reopened. If you still require help, please start a new topic and include a fresh HijackThis log and a link to this thread in your new topic.

    If you are not the user who started this thread, you must start your own Thread instead :)
Sign In or Register to comment.