BullGuard
 HomeLog InRegisterCommunity CalendarSearch the ForumView The Member ListHelp
Yet another LopAH problem!
   
BullGuard Antivirus Forum > BullGuard zone > BullGuard Trial users > Yet another LopAH problem!  
Forum Quick Jump
 
New Topic Locked Topic Printable version of : Yet another LopAH problem!
[ << Previous Thread | Next Thread >> ]

Ty
New Member


Date Joined Nov 2006
Total Posts : 2
 
   Posted 11/11/2006 8:02 PM (GMT +2)    Quote: Yet another LopAH problem!Alert an admin about: Yet another LopAH problem!
HI
 
AVG tells me that a threat was detected while opening C:\WINDOWS\gmayk1.dll Trojan horse Lopah
 
I ran catchme and the log file stated:
 
C:\WINDOWS\system32\lpt8.kzw
C:\WINDOWS\gmayk1\.upd
C:\WINDOWS\gmayk1\.dll
C:\WINDOWS\gmayk1\.upd
 
Any help on this greatly appreciated
 
Cheers
 
 
 
 
Back to Top
 

Ty
New Member


Date Joined Nov 2006
Total Posts : 2
 
   Posted 11/15/2006 8:45 PM (GMT +2)    Quote: Yet another LopAH problem!Alert an admin about: Yet another LopAH problem!
Still got the virus, can anyone please help?


thanks


Back to Top
 

Touch
Forum Moderator




Date Joined Jun 2004
Total Posts : 12981
 
   Posted 11/16/2006 8:12 AM (GMT +2)    Quote: Yet another LopAH problem!Alert an admin about: Yet another LopAH problem!
Hi Ty smile


Sorry, I haven´t seen Your post




 
by Swandog46 to your Desktop.
 
Start up Avenger or Test exe.
Check the 'Input script manually' option.
Click the Magnifying Glass icon.
In the box that opens, copy,then paste all the text in the quote box below.
Quote:
 
 
Files to delete:
C:\WINDOWS\system32\lpt8.kzw
C:\WINDOWS\gmayk1\.upd
C:\WINDOWS\gmayk1\.dll
 

Registry values to replace with dummy:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows | AppInit_DLLs

Then click on 'Done'.
Click the Traffic Light icon to start the program.
Then press OK at the prompts to reboot your PC.

After the reboot,
 
1. Get newest Hijackthis from http://danborg.org/spy/hjt/alternativ.exe
Another name for Hijackthis exe

2 Install it in a PERMANENT folder! Example : c:\hijackthis\

3 Run hijackthis.  (alternativ exe).

Choose the "Do a system scan and save a log file" option to perform your scan.
HijackThis will analyze your system, and automatically open a notepad textfile containing the HijackThis log when the scan is finished.
Open the text files containing the logs with a text editor and click Edit -> Select All, followed by Edit -> Copy.
From within the browser window and with the message body text box selected, click Edit -> Paste.
 
After the restart, it creates a log file that should open with the results of Avenger’s actions. This log file will be located at C:\avenger.txt
 
 
Please copy/paste the content of C:\avenger.txt into your reply along with a fresh HJT log


Please start your own thread by clicking the new topic button. Do NOT post your problem in someone elses thread.
Do not PM me with logfiles. They will be deleted
 
 

Back to Top
 

Touch
Forum Moderator




Date Joined Jun 2004
Total Posts : 12981
 
   Posted 11/17/2006 4:39 AM (GMT +2)    Quote: Yet another LopAH problem!Alert an admin about: Yet another LopAH problem!
Ty - Still with us ?


Please start your own thread by clicking the new topic button. Do NOT post your problem in someone elses thread.
Do not PM me with logfiles. They will be deleted
 
 

Back to Top
 
New Topic Locked Topic Printable version of : Yet another LopAH problem!
 
Forum Information
Currently it is Monday, December 22, 2014 10:39 PM (GMT +2)
There are a total of 60,825 posts in 13,361 threads.
In the last 3 days there were 1 new threads and 2 reply posts. View Active Threads
Who's Online
This forum has 36999 registered members. Please welcome our newest member, landskrona66.
4 Guest(s), 0 Registered Member(s) are currently online.  Details
5 Latest Threads
Firewall causing high CPU usage (7)12/22/2014 4:30:10 PM (Robert Mateescu)
"Optimising your system" message? (0)12/22/2014 3:48:37 PM (NorthPole)