MalwareTeks Bug Tracker Syndication Feed

Attention! Not removed

2010-01-15T22:30:22Z

Bug ID:	14
Summary:	Attention! Not removed
Product/Component/Version:	FixIEDef/1.7.22.7514
Status:	Closed
Severity:	Trivial

I ran the fix, but the log says it didn't find any malicious files or directories and Attention! is still popping-up. Is there something else I an do?

error when trying to scan FIxIEDef

2009-10-03T22:12:42Z

Bug ID:	11
Summary:	error when trying to scan FIxIEDef
Product/Component/Version:	FixIEDef/1.7.22.7514
Status:	Closed
Severity:	None

error when trying to scan....

Error code when using FixIEDef

2009-09-01T20:57:30Z

Bug ID:	9
Summary:	Error code when using FixIEDef
Product/Component/Version:	FixIEDef/1.7.22.7514
Status:	Closed
Severity:	None

After I press Scan, I get the following message. What does it mean?

Line -1:
Error: The requested action with this object has failed.

My OS is
Windows Vista Build 6001: Service Pack 1
Operating in Safe Mode due to inability to completely log on normally.

used FixIEDef but did not get rid of the virus completely

2009-02-02T03:35:10Z

Bug ID:	8
Summary:	used FixIEDef but did not get rid of the virus completely
Product/Component/Version:	FixIEDef/1.7.22.7326
Status:	Closed
Severity:	None

I got a virus from the following (non-euclidean geometry)
web site, I believe, downloading their javac application

http://www.cs.unm.edu/~joel/NonEuclid/NonEuclid.html

I attempted to clean it with FixIEDef 1.7.22.7319, but although
the most intimidating pop-up does not bother me anymore,
the browser would every few minutes open a new window,
e.g. currently: http://hotjobs.yahoo.com/
and http://octanetv.com/shows/15/episodes/146?cmpid=fi

The pop-up that doesn't show up anymore used to say:

Warning!!! Your computer contains various signs of
viruses and malware programs presence.
Your system requires immediate anti virus check!
Antivirus 360 will perform a quick and free
scanning of your PC for viruses and malicious programs.

Thank you! I Enclose a copy of the log file
(and then I'll try the new version of FixIEDef).
********************************************************************************
* *
* FixIEDef Log *
* Version 1.7.22.7319 *
* *
********************************************************************************

Created at 14:36:27 on Tuesday, January 27, 2009

Time Zone : (GMT-05:00) Eastern Time (US & Canada)

Logged On User : my name

Operating System : Microsoft Windows XP Professional Service Pack 2
OS Architecture : X86
System Langauge : English (United States)
Keyboard Layout : English (United States)
Processor : X64 Intel(R) Pentium(R) 4 CPU 3.40GHz

System Drive : C:\\
Windows Directory : C:\\WINDOWS
System Directory : C:\\WINDOWS\\system32

System Drive Type : Fixed
System Drive Status : READY
System Drive Label :
System Drive Size : 76.23 GB
System Drive Free : 65.77 GB

Total Physical Memory: 1022 MB
Free Physical Memory : 632 MB
Total Page File : 1022 MB
Free Page File : 2197 MB
Total Virtual Memory : 2048 MB
Free Virtual Memory : 1961 MB

Boot State : Normal boot

--------------------------------------------------------------------------------

!!! userinit.exe is Clean !!!

--------------------------------------------------------------------------------

!!! Files that have been deleted !!!

No malicious files found

--------------------------------------------------------------------------------

!!! Directories that have been removed !!!

No malicious directories to be removed

--------------------------------------------------------------------------------

!!! Registry entries that have been removed !!!

No malicious Registry entries found

================================================================================

All Done :)

ShadowPuterDude

Safe Surfing!!!

FixIEDef helped to remove the Virus

2009-01-16T01:47:05Z

Bug ID:	7
Summary:	FixIEDef helped to remove the Virus
Product/Component/Version:	FixIEDef/1.7.20.7261
Status:	Closed
Severity:	None

Thanks a lot for the nice fix .... All the Search Messages of Error! Your computer has been hijacked by a dangerous virus gone ....I am posting the FixIEDef Log file.
********************************************************************************
* *
* FixIEDef Log *
* Version 1.7.20.7261 *
* *
********************************************************************************

Created at 15:10:54 on Sunday, January 11, 2009

Time Zone : (GMT-05:00) Eastern Time (US & Canada)

Logged On User : Ranjeet

Operating System : Microsoft® Windows Vista™ Home Premium Service Pack 1
OS Version : 6.0.6001
System Langauge : English (United States)
Keyboard Layout : English (United States)
Processor : X86 Intel(R) Core(TM)2 Duo CPU T5750 @ 2.00GHz

System Drive : C:\\\\
Windows Directory : C:\\\\Windows
System Directory : C:\\\\Windows\\\\system32

System Drive Type : Fixed
System Drive Status : READY
System Drive Label : OS
System Drive Size : 225.87 GB
System Drive Free : 127.28 GB

Total Physical Memory: 3061 MB
Free Physical Memory : 1592 MB
Total Page File : 3061 MB
Free Page File : 4445 MB
Total Virtual Memory : 2048 MB
Free Virtual Memory : 1936 MB

Boot State : Normal boot

--------------------------------------------------------------------------------

!!! userinit.exe is Clean !!!

--------------------------------------------------------------------------------

!!! Files that have been deleted !!!

C:\\\\Users\\\\Ranjeet\\\\Desktop\\\\Cheap Pharmacy Online.url
C:\\\\Users\\\\Ranjeet\\\\Desktop\\\\Cheap Software.url
C:\\\\Users\\\\Ranjeet\\\\Desktop\\\\MP3 Download.url
C:\\\\Users\\\\Ranjeet\\\\Desktop\\\\Search Online.url
C:\\\\Users\\\\Ranjeet\\\\Desktop\\\\SMS TRAP.url
C:\\\\Users\\\\Ranjeet\\\\Desktop\\\\VIP Casino.url
C:\\\\Users\\\\Ranjeet\\\\Favorites\\\\Cheap Pharmacy Online.url
C:\\\\Users\\\\Ranjeet\\\\Favorites\\\\Cheap Software.url
C:\\\\Users\\\\Ranjeet\\\\Favorites\\\\MP3 Download.url
C:\\\\Users\\\\Ranjeet\\\\Favorites\\\\Search Online.url
C:\\\\Users\\\\Ranjeet\\\\Favorites\\\\SMS TRAP.url
C:\\\\Users\\\\Ranjeet\\\\Favorites\\\\VIP Casino.url
C:\\\\Users\\\\Ranjeet\\\\AppData\\\\Roaming\\\\Microsoft\\\\Windows\\\\Start Menu\\\\Cheap Pharmacy Online.url
C:\\\\Users\\\\Ranjeet\\\\AppData\\\\Roaming\\\\Microsoft\\\\Windows\\\\Start Menu\\\\Cheap Software.url
C:\\\\Users\\\\Ranjeet\\\\AppData\\\\Roaming\\\\Microsoft\\\\Windows\\\\Start Menu\\\\MP3 Download.url
C:\\\\Users\\\\Ranjeet\\\\AppData\\\\Roaming\\\\Microsoft\\\\Windows\\\\Start Menu\\\\Search Online.url
C:\\\\Users\\\\Ranjeet\\\\AppData\\\\Roaming\\\\Microsoft\\\\Windows\\\\Start Menu\\\\SMS TRAP.url
C:\\\\Users\\\\Ranjeet\\\\AppData\\\\Roaming\\\\Microsoft\\\\Windows\\\\Start Menu\\\\VIP Casino.url
C:\\\\Windows\\\\ios.dat
C:\\\\Windows\\\\system32\\\\actskn45.ocx
C:\\\\Windows\\\\system32\\\\c.ico
C:\\\\Windows\\\\system32\\\\inte1b.dll
C:\\\\Windows\\\\system32\\\\m.ico
C:\\\\Windows\\\\system32\\\\m3.ico
C:\\\\Windows\\\\system32\\\\p.ico
C:\\\\Windows\\\\system32\\\\s.ico
C:\\\\Windows\\\\system32\\\\sf.ico

--------------------------------------------------------------------------------

!!! Directories that have been removed !!!

No malicious directories to be removed

--------------------------------------------------------------------------------

!!! Registry entries that have been removed !!!

No malicious Registry entries found

================================================================================

All Done :)

ShadowPuterDude

Safe Surfing!!!

Thanks Again ....

AutoIT error message "The requested action with this object has failed"

2008-12-30T23:38:05Z

Bug ID:	6
Summary:	AutoIT error message "The requested action with this object has failed"
Product/Component/Version:	FixIEDef/1.7.20.6840
Status:	Closed
Severity:	None

When I doubleclick on "FixIEDef.exe" on my Windows 2000 desktop, accept the license agreement and press "Scan", I get the following error message:

AutoIT Error
Line-1:
Error: The requested action with this object has failed.

Do I need to install AutoIT first to run FixIEDef or what does this message mean? I tried to run the program as user Administrator, both in mormal and in safe mode, but I always get the same error message.

Fake alert gone, thank you, but was not detected.

2008-10-14T12:09:24Z

Bug ID:	3
Summary:	Fake alert gone, thank you, but was not detected.
Product/Component/Version:	FixIEDef/1.5.5.6037
Status:	Closed
Severity:	Minor

Hi,

Had a fake alert "Attention, visitor! Some dangerous viruses detected in your system. Microsoft Windows XP files corrupted. This may lead to the destruction of important files in c:\\\\Windows. Download protection software now! Click OK to download anti spyware now (recommended)

Not too different from the Fake Alerts shown on malwareteks so downloaded FixIEDef and ran it. However nothing was detected but the problem has gone away.

Thank you, but not sure how it worked, when it did not detect anything.
Cheers
Matt

report of a trojan horse in ma PC

2008-10-09T11:45:07Z

Bug ID:	5
Summary:	report of a trojan horse in ma PC
Product/Component/Version:	FixIEDef/1.6.10.6194
Status:	Closed
Severity:	None

hello everybody and sorry for my bad english!

i have done a scan with fixIEDdef and i put here the report of the scan. I don't know if this is the right place or not. Sorry if it's not!
********************************************************************************
* *
* FixIEDef Log *
* Version 1.6.10.6194 *
* *
********************************************************************************

Created at 14:03:32 on Wednesday, October 01, 2008

Time Zone :

Logged On User : Utilisateur

Operating System : Microsoft Windows XP Professionnel Service Pack 3
OS Version : 5.1.2600
System Langauge : French (Standard)
Keyboard Layout : French (Standard)
Processor : X86 AMD Athlon(tm) 64 Processor 3500+

System Drive : C:\\\\
Windows Directory : C:\\\\WINDOWS
System Directory : C:\\\\WINDOWS\\\\system32

System Drive Type : Fixed
System Drive Status : READY
System Drive Label : MAXTOR 1
System Drive Size : 239.36 GB
System Drive Free : 165.59 GB

Total Physical Memory: 1023 MB
Free Physical Memory : 286 MB
Total Page File : 1023 MB
Free Page File : 1912 MB
Total Virtual Memory : 2048 MB
Free Virtual Memory : 1963 MB

Boot State : Normal boot

--------------------------------------------------------------------------------

!!! Files that have been deleted !!!

C:\\\\WINDOWS\\\\WLXPGSS.SCR
C:\\\\WINDOWS\\\\system32\\\\c.ico
C:\\\\WINDOWS\\\\system32\\\\drv1.dll
C:\\\\WINDOWS\\\\system32\\\\drv2.dll
C:\\\\WINDOWS\\\\system32\\\\drvc.dll

--------------------------------------------------------------------------------

!!! Directories that have been removed !!!

No malicious directories to be removed

--------------------------------------------------------------------------------

!!! Registry entries that have been removed !!!

No malicious Registry entries found

================================================================================

All Done :)

ShadowPuterDude

Safe Surfing!!!

My questionis: wht do i do now?
Thank you

Deletes directory with same name as a target file, when it's not supposed to delete the directory

2008-09-07T19:03:05Z

Bug ID:	4
Summary:	Deletes directory with same name as a target file, when it's not supposed to delete the directory
Product/Component/Version:	FixIEDef/1.5.6.6088
Status:	Closed
Severity:	Major

When targeting files with no file extension and a directory of the same name exists, FixIEDef will delete the directory during file deletion operations. This is not desired behavior.

Fixed in Version 1.5.7.6098

Fixed - Hijack browser. - But error appear missing c:\\\\\\\\document everytime reboot laptop. Overall my kids is happy. Thanks a million.

2008-08-16T02:22:43Z

Bug ID:	2
Summary:	Fixed - Hijack browser. - But error appear missing c:\\\\\\\\document everytime reboot laptop. Overall my kids is happy. Thanks a million.
Product/Component/Version:	FixIEDef/1.5.3.6116
Status:	Closed
Severity:	None

********************************************************************************
* *
* FixIEDef Log *
* Version 1.5.3.6116 *
* *
********************************************************************************

Created at 17:04:29 on Friday, August 15, 2008

Time Zone : (GMT-08:00) Pacific Time (US & Canada)

Logged On User : Cai

Operating System : Microsoft Windows XP Home Edition Service Pack 2
OS Version : 5.1.2600
System Langauge : English (United States)
Keyboard Layout : English (United States)
Processor : X86 Genuine Intel(R) CPU T2300 @ 1.66GHz

System Drive : C:\\\\
Windows Directory : C:\\\\WINDOWS
System Directory : C:\\\\WINDOWS\\\\system32

Total Physical Memory : 1562732 KB
Free Physical Memory : 866528 KB
Total Virtual Memory : 2097024 KB
Free Virtual Memory : 2015768 KB

Boot State : Normal boot

--------------------------------------------------------------------------------

!!! Files that have been deleted !!!

C:\\\\WINDOWS\\\\system32\\\\avid.dll

--------------------------------------------------------------------------------

!!! Directories that have been removed !!!

No malicious directories to be removed

--------------------------------------------------------------------------------

!!! Registry entries that have been removed !!!

HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Classes\\\\DivX.1
HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Classes\\\\CLSID\\\\{47FE9CB0-BFEE-4EBB-8BE2-F65F8811CEE7}
HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Classes\\\\Interface\\\\{5F49381C-F0CA-45A5-98A0-C02062A8109F}
HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Classes\\\\Interface\\\\{FF542591-DDEE-4E48-A972-C71088788A5F}
HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Explorer\\\\Browser Helper Objects\\\\{47FE9CB0-BFEE-4EBB-8BE2-F65F8811CEE7}
HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Run "KernelFaultCheck"

================================================================================

All Done :)

ShadowPuterDude

Safe Surfing!!!