08-09-2012 04:17 PM
Norton antivirus says C:\windows\system32\services.exe is infected with Trojan.patchep!sys and that I should remove it manually, but that doesn't seem to work. Can anyone help me get rid of this?
I am running Windows 7 x64.
Thanks.
08-09-2012 08:41 PM
ANY other user other than the thread starter is not to use any instructions, scripts or proceedures, The work though in cleaning a system is individual and only for that system due to a number of factors.
Unfortunately, with the amount of threads means the waiting time is longer, Norton continually Blocking files won't hurt your system but is is just annoying, Please wait and be patient. I am trying to keep up, spending hours here to script and clean machines on a first come/first served basis. If you or someone adds to your thread It will be pushed back in line due to the new update. I use the boards in reverse to what is seen
Please do not run any tools unless instructed to do so.
1. Find
2. Break
3. Destroy
4. Cleanup (including system as a whole)
Please read every post completely before doing anything.
)
Do you have a Flash Drive??
Quads
08-10-2012 04:37 AM
Yes, I have a flash drive.
08-10-2012 08:27 PM
Read Slowly and all of it.
Please download http://www.bleepingcomputer.com/download/farbar-re
Transfer it on to the Flash Drive / portable Hard Drive.
Enter System Recovery Options.
To enter System Recovery Options from the Advanced Boot Options:
On the System Recovery Options menu you will get the following options:
Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt
Quads
08-10-2012 11:59 PM
Hi Quads,
Here is the log file. Thanks.
08-11-2012 08:24 PM
Download the script attached, needs to be the same file name as well (fixlist.txt), Copy across to flash drive
NOTE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Now please enter System Recovery Options again. Like previously
Quads
08-12-2012 09:27 AM
Hey Quads,
Here is the log file. Thanks.
08-12-2012 06:30 PM
Uninstall
Malwarebytes
Quads
08-13-2012 05:01 AM
Malwarebytes has been removed.
08-13-2012 08:39 PM
Step 3.
Please read carefully Read all of this message first
Download Combofix http://www.bleepingcomputer.com/download/anti-viru
Right click the combofix.exe on the desktop and select from the menu "Run as Administrator"
****Note: Do not mouseclick combofix's window while it's running. That may cause it to stall or freeze ****
Note: ComboFix may reset a number of Internet Explorer's settings, including making it the default browser.
Note: Combofix prevents autorun of ALL CDs, floppies and USB devices to assist with malware removal & increase security.
*EXTRA NOTES*
Quads
