Jump to content


Photo

***False positive Trojan.Downloader.ED***


  • This topic is locked This topic is locked
361 replies to this topic

#21 John L. Galt

John L. Galt

    Forum Deity

  • Experts
  • PipPipPipPipPipPip
  • 1,557 posts
  • Gender:Male
  • Location:3rd Rock
  • Interests:Annoyances, especially M$ related.

Posted 15 April 2013 - 07:59 PM

a direct link to the file and a download manager will work as well.

FCE92D3055DAE81D194C9CD863349227.png

375727.png

Interested in alternatives to Micro$oft? Visit our Alternative OS Forum. Also, check out our exclusive interviews (FREE membership required!!!)

 

GrabIt βeta Tester 


#22 andertrack723

andertrack723

    New Member

  • Members
  • Pip
  • 16 posts

Posted 15 April 2013 - 08:00 PM

Just do a system restore:


To open the System Recovery Options menu on your computer




  • Remove all floppy disks, CDs, and DVDs from your computer, and then restart your computer using the computer's power button.

  • Do one of the following:

    • If your computer has a single operating system installed, press and hold the F8 key as your computer restarts. You need to press F8 before the Windows logo appears. If the Windows logo appears, you need to try again by waiting until the Windows logon prompt appears, and then shutting down and restarting your computer.

    • If your computer has more than one operating system, use the arrow keys to highlight the operating system you want to repair, and then press and hold F8.

  • On the Advanced Boot Options screen, use the arrow keys to highlight Repair your computer, and then press Enter. (If Repair your computer isn't listed as an option, then your computer doesn't include preinstalled recovery options, or your network administrator has turned them off.)

  • Select a keyboard layout, and then click Next.

  • On the System Recovery Options menu, click a tool to open it.


#23 tonydav

tonydav

    New Member

  • Members
  • Pip
  • 4 posts

Posted 15 April 2013 - 08:05 PM

@Edgor, you're lucky to have received a reply. I'm still waiting for any acknowledgement!

#24 Edgor

Edgor

    New Member

  • Members
  • Pip
  • 27 posts

Posted 15 April 2013 - 08:12 PM

I finally had to system restore back to 5 days ago. Folks, this better never happen again or I'm moving to a different vendor.

Already have to uninstall and reinstall my virus program and several other things as a result of this mess. My entire evening has been wasted.

#25 Edgor

Edgor

    New Member

  • Members
  • Pip
  • 27 posts

Posted 15 April 2013 - 08:13 PM

By the way first email response 8:09, last one 8:41, none since.

#26 captnshaw

captnshaw

    New Member

  • Members
  • Pip
  • 2 posts

Posted 15 April 2013 - 08:19 PM

When I click restore all it restores nothing? My system is still hosed up? Suggestions?

#27 exile360

exile360

    exile

  • Administrators
  • PipPipPipPipPipPip
  • 16,017 posts
  • Gender:Male

Posted 15 April 2013 - 08:20 PM

When I click restore all it restores nothing? My system is still hosed up? Suggestions?

Please contact Support directly via one of the following links as they will need to assist you directly with this to get your system back in working order if the above fixes did not correct the problems:

Home User Support
Business Support
Samuel E Lindsey
Product Manager

Posted Image

Follow us: Twitter, Become a fan: Facebook

#28 Mainard

Mainard

    Forum Admin

  • Administrators
  • PipPipPipPipPipPip
  • 1,718 posts
  • Gender:Male
  • Location:San Jose, CA
  • Interests:Ice Hockey
    Guild Wars 2 & League of Legends

Posted 15 April 2013 - 08:20 PM

All,

If you can get Windows to boot (safe mode or not). Download this file: Here

Unzip the file then run the file: RunThis.bat as admin. This should restore all your files from quarantine.

Thank you.
Grant Gardiner
Software Development Engineer in Test

Posted Image

Follow us: Twitter, Become a fan: Facebook

#29 Popeye

Popeye

    True Member

  • Honorary Members
  • PipPipPipPip
  • 356 posts
  • Gender:Male
  • Location:Chesapeake, Va.
  • Interests:Law Enforcement, Homeland Security, Computers, Traveling.

Posted 15 April 2013 - 08:38 PM

Hi Mainard,
When I unzip the file I get 4 choices, which one do I run:

Fix Tool
MBAMCore.dll
MBAM-Rules
Run This

#30 exile360

exile360

    exile

  • Administrators
  • PipPipPipPipPipPip
  • 16,017 posts
  • Gender:Male

Posted 15 April 2013 - 08:39 PM

Hi Mainard,
When I unzip the file I get 4 choices, which one do I run:

Fix Tool
MBAMCore.dll
MBAM-Rules
Run This

Run Run This.bat as administrator, that's all that's required for running the fix.
Samuel E Lindsey
Product Manager

Posted Image

Follow us: Twitter, Become a fan: Facebook

#31 Mainard

Mainard

    Forum Admin

  • Administrators
  • PipPipPipPipPipPip
  • 1,718 posts
  • Gender:Male
  • Location:San Jose, CA
  • Interests:Ice Hockey
    Guild Wars 2 & League of Legends

Posted 15 April 2013 - 08:40 PM

RunThis.bat (run as admin if on Vista/7/8)

Thank you.
Grant Gardiner
Software Development Engineer in Test

Posted Image

Follow us: Twitter, Become a fan: Facebook

#32 BRANDIPETERSON

BRANDIPETERSON

    New Member

  • Members
  • Pip
  • 8 posts

Posted 15 April 2013 - 08:55 PM

Edgor,

Is your system running Windows XP? If Exile's instructions do not work, please try installing this file from Microsoft. It should reinstall comctl32.dll onto your system.


HOW DO YOU DO THIS IF YOU CANNOT ACCESS THE INTERNET IN SAFE MODE?

#33 exile360

exile360

    exile

  • Administrators
  • PipPipPipPipPipPip
  • 16,017 posts
  • Gender:Male

Posted 15 April 2013 - 08:57 PM

HOW DO YOU DO THIS IF YOU CANNOT ACCESS THE INTERNET IN SAFE MODE?

Did you try Safe Mode with Networking? If you did and were still unable to access the internet then you'll need to download the fix from another computer and transfer it over to the affected system using some external media such as a USB flash drive, burnable CD/DVD or external hard drive.
Samuel E Lindsey
Product Manager

Posted Image

Follow us: Twitter, Become a fan: Facebook

#34 FremontPC

FremontPC

    Advanced Member

  • Honorary Members
  • PipPipPip
  • 105 posts

Posted 15 April 2013 - 08:58 PM

Disregard.

#35 KSD68

KSD68

    New Member

  • Members
  • Pip
  • 3 posts

Posted 15 April 2013 - 09:01 PM

Just need to know about items left in quarantine....do they matter after a Windows System Restore? Why doesn't Restore All work???

#36 exile360

exile360

    exile

  • Administrators
  • PipPipPipPipPipPip
  • 16,017 posts
  • Gender:Male

Posted 15 April 2013 - 09:07 PM

Just need to know about items left in quarantine....do they matter after a Windows System Restore? Why doesn't Restore All work???

Restore All works, but sometimes there are duplicate backup copies created in quarantine. Since the files have already been restored, these backup files cannot be restored and will remain in quarantine until deleted.
Samuel E Lindsey
Product Manager

Posted Image

Follow us: Twitter, Become a fan: Facebook

#37 Mainard

Mainard

    Forum Admin

  • Administrators
  • PipPipPipPipPipPip
  • 1,718 posts
  • Gender:Male
  • Location:San Jose, CA
  • Interests:Ice Hockey
    Guild Wars 2 & League of Legends

Posted 15 April 2013 - 09:07 PM

Ksd68,

There may be copies of the same file in your quarantine. You can check manually at the file locations listed within the quarantine tab.

Thank you.
Grant Gardiner
Software Development Engineer in Test

Posted Image

Follow us: Twitter, Become a fan: Facebook

#38 John L. Galt

John L. Galt

    Forum Deity

  • Experts
  • PipPipPipPipPipPip
  • 1,557 posts
  • Gender:Male
  • Location:3rd Rock
  • Interests:Annoyances, especially M$ related.

Posted 15 April 2013 - 09:07 PM

Restore is working in terms of the actual files being placed back where they came from - but b/c of the sheer volume of FPs that that file cause the program seems to have 'ghost' entries, or as a moderator put it, duplicates.

Check for any of those files in their actual locations and you'll see that they are back where they belong. Once you do that you can just delete the quarantine entry

FCE92D3055DAE81D194C9CD863349227.png

375727.png

Interested in alternatives to Micro$oft? Visit our Alternative OS Forum. Also, check out our exclusive interviews (FREE membership required!!!)

 

GrabIt βeta Tester 


#39 kapcreations

kapcreations

    New Member

  • Members
  • Pip
  • 15 posts

Posted 15 April 2013 - 09:09 PM

We have followed the suggestions above. We have been able to release some files from the quarantine, but many files are not able to be released. We click on the release all button, the screen refreshes, and the files remain in the quarantien.

Somehow we need to redploy the missing files.

It would be helpful if we could script out the current encrypted quarantine to a readable list so we can determine which files to recover from a master image, and automate from there.

#40 John L. Galt

John L. Galt

    Forum Deity

  • Experts
  • PipPipPipPipPipPip
  • 1,557 posts
  • Gender:Male
  • Location:3rd Rock
  • Interests:Annoyances, especially M$ related.

Posted 15 April 2013 - 09:10 PM

Double verify the missing files are actually missing, per my previous response and the two above it.

FCE92D3055DAE81D194C9CD863349227.png

375727.png

Interested in alternatives to Micro$oft? Visit our Alternative OS Forum. Also, check out our exclusive interviews (FREE membership required!!!)

 

GrabIt βeta Tester 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users