This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

Reocurring Trojan

226 min read

This thread's last reply is from September 15, 2012, 8:03 PM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

Edited:
Well I did uninstall firefox but I had some trouble installing it since I'm used to installing programs as an administrator. However I did run as administrator and it installed fine but some websites still freeze. I have a pic of one of the things that happen randomly I think I could be wrong there could be a pattern.
Miscience,
Sorry for the delay.
I missed your edited page.
Did you successfully re-insall Firefox?
That PHP file is only supposed to run with facebook.
It looks like a file that is supposed to be in with the Facebook settings.
-----------------------------------------
Check hard Drive for Errors
Open Notepad... then copy and paste the following line into Notepad:
(Notepad is in Start, Programs, Accessories)
cmd  /c  chkdsk  c:  |find  /v  "percent"  >> "%userprofile%\desktop\checkhd.txt"

Now Save the NotePad file like this:
  • Click on File from the top menu bar.
  • Select Save As, use Filename: testhd.bat and Save As Type: All Files.
  • Choose Desktop as the location
  • Click Save.

Right click on testhd.bat on your desktop and select Run As Administrator to run it. OK the UAC.
A Command Prompt box will pop up, then close after a couple minutes.
Please post the contents of the checkhd.txt file from your desktop.
If the file is very long, just copy and paste the LAST 20 or 30 lines into your reply.

askey127
Hey I haven't checked the forum in a bit myself I been a bit busy. That facebook file popped up while I was on another website. Also that isn't the only file that has popped up for download there has been like 4 other types of files. Anyways I did what you asked here it is.


WARNING! F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...
File verification completed.
373 large file records processed.

0 bad file records processed.

2 EA records processed.

58 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 3)...
Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 3)...
Security descriptor verification completed.
50353 data files processed.

CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
Windows has checked the file system and found no problems.

244093951 KB total disk space.
217016820 KB in 202992 files.
127640 KB in 50354 indexes.
0 KB in bad sectors.
367459 KB in use by the system.
65536 KB occupied by the log file.
26582032 KB available on disk.

4096 bytes in each allocation unit.
61023487 total allocation units on disk.
6645508 allocation units available on disk.
That file is supposed to be minimized to a little icon in the lower right of the browser. Its icon is a small rectangle labeled Like|facebook. If you click it you are taken to Facebook and choose a "like" for something.
I have only seen it on IE.
You might want to review your Plug-Ins for Firefox. (<Alt>key > Tools > Add-Ons > Plug-Ins)
That Facebook icon is a Plug-in.
You can disable all of the Plug-Ins to start with, then enable them if you wish, one by one, to see if any one of them is associated with a problem.

Did you actually make a new clean install of Firefox, from scratch?
Clean install ? I uninstalled firefox but kept the settings saved if that is what you were referring to.
You may need to Uninstall Firefox and NOT save the settings.
The plug-ins for Firefox that tend to prevent popups, annoyances, and infections are NoScript and AdBlock Plus
That Facebook file is a tracker installed without your permission. AdBlock Plus will usually prevent it.
I just did the reinstall and firefox is running great!. Mr. askey127 thank you for your patients I appreciated it. I'm glad we have websites with techi's like you helping people out it's a good service have good one.