Help - Search - Members - Calendar
Full Version: Win32/Nsag
Gladiator Security Forum > Malware Help Forum > HELP! Think you are Infected?
IslandPeak
Hi,


Found you via Google in desperation after getting the Win32/Nsag virus.

I followed the directions in this topic: http://gladiator-antivirus.com/forum/index...showtopic=29726

It seemed to work as when I´m running AVG and Ad-Aware SE there seems to be no sign of the virus.

However my laptop has gone into stonage and is working REALY slow.

Anyway to fix this? - Must admit that I´m very newbee and green, so please no fancy terms in your reply OMG.gif

Thank you SOOOOOOOOOOO much!
LoPhatPhuud
First:
Create a directory on your hardrive to save HijackThis.exe. A directory like c:\hijackthis. If you do not do this, you will not be able to use the backup/restore features.

Download HijackThis from:

HijackThis Download Site

Save this file into the directory you made previously and then run the program named hijackthis.exe. When the program opens click on the Config button, then click on the Misc Tools button, and click on the Check for update online button. When it completes checking/applying updates press the back button.

Now click on the Scan button and when it is finished click on the Save Log button. A Notepad window will open with the contents of this log. Click on Edit then click on Select all. Then click on Edit and then Click on Copy.

Create a reply to this post here and right click in message area and select paste to paste the log into the post.

Someone will reply to you after reading this post. DO NOT fix any entries unless you understand what you are doing.

To see a tutorial with screenshots on using HijackThis you can click on the link below:

How to use HijackThis to remove Browser Hijackers, Malware, & Spyware



Second:
Download 'Autoruns' from here:
http://www.sysinternals.com/Utilities/Autoruns.html

Unzip to a folder and the double click on autoruns.exe

Wait until the program has finished running (the status line will show 'Ready')
Under the 'Options' menu, make sure that 'Include Empty Sections' is checked.
Wait again until ready.

Be sure the 'Everything' tab is selected.
Select 'File -> Save' and save the output file.

Copy the contents of the Autoruns text file and post its contents in this thread.
IslandPeak
Hi LoPhatPhuud,

Thanks a lot.

Did the hijack but can´t seem to download "Autoruns" as the site loads very slow. Is there anywhere else I can download it from?


IslandPeak.
LoPhatPhuud
Autoruns attached to this post.

Worked fine here and its a small file.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.