Solved backdoor win32 cycbot.b

[FCUSA]

Good! Now create a fresh/clean restore point Create a System Restore Point in Vista [How To] | Windows Vista Customization | Windows Tools, Help & Guides

Hello Jacee -
Restore Point Created successfully.

When appropriate, I would like to address the following (as I am not certain what to do with them):

*My backup drive was plugged in when first infected, but disconnected before the scheduled backup took place;

*I put a stick drive in to remove a file from the infected computer. Uncertain if it is salvageable. If it is your suggestion to toss it, so be it!

Overall, the computer is running well - like new!

Thank you again,
Sally

 

[Jacee]

oops! late again

Download Flash Disinfector from http://www.techsupportforum.com/sectools/sUBs/Flash_Disinfector.exe (note: this is direct download link.

Be sure to insert your flashdrive before you begin!
Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.

The utility may ask you to insert your flash drive and/or other removable drives. Please do so and allow the utility to clean up those drives as well.

Wait until it has finished scanning and then exit the program.
Reboot your computer when done.

***Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Don't delete this folder...it will help protect your drives from future infection.

PS ... my antivirus was claiming that a virus wanted access to my computer when I clicked on the disinfector link. It's a direct download, and it's safe!

 

[FCUSA]

Never late!!

I will work on your instructions and thanks for the additional details.

 

[FCUSA]

Here I am again! Thought this would be an easy one - ha, ha.

I downloaded the file - seemed to go too quick! Went to run, said some files were corrupt in the download and to install fresh copy; did that, came up with the attached screen; it is continuing in this cycle.

What to do?

 

[Lottiemansion]

Hi,

Clear your temp files in internet explorer & then re-download the software, it has been corupted. You will then be able to install it!

 

[FCUSA]

Hello -

How do I go about that?

 

[FCUSA]

OK - did that and redownloaded. Now when I double click there is nothing happening.

 

[FCUSA]

I brought up Properties on the program and at the bottom of the General Tab - Security (this file came from another computer and might be blocked etc. - do I have to 'unblock' it?

EDIT: Unblocked it and still nothing seems to be happening?

I've run out of my diagnostic abilities.

 

[FCUSA]

Hello -

Still trying to work out why this download is not working. Same issue exists this AM; tried going to the Tech Support Forum to troubleshoot the download. But not sure where to go once on the site. I tried inching my way in on the URL, but it seems it is either all (straight to the .exe file) or nothing (home page).

 

[Jacee]

Right click on the zipped file, then choose "extract here". Once you see the icon, then you will be able to run the disinfector.

 

[FCUSA]

Sorry? I right clicked on the Desktop icon but do not see 'zip file'?

 

[FCUSA]

I see 'send to zip'? Is that it?

 

[FCUSA]

FYI -

In properties under General at the bottom - the Security is back to Blocked - I guess because it downloaded again this morning.

 

[derekimo]

I see 'send to zip'? Is that it?

If you don't see "extract" then it's already unzipped, I didn't get a zipped file when I downloaded it.

FYI -

In properties under General at the bottom - the Security is back to Blocked - I guess because it downloaded again this morning.

After you pressed unblock did you click apply, below it?

 

[FCUSA]

I thought I did last night, but will try again now.

 

[FCUSA]

OK -

I did and it brings me back to WinRAR self-extracting archive (like attachment in previous post - except the line after 'extracting vfind.exe' is not listed.

CRC failed in vfind.exe (instead of pv.exe - like yesterday)

Last night when I hit close or cancel (tried several times), it seems to just cycle back.

 

[derekimo]

OK, I'm sorry, I just right clicked on on the icon an chose extract here and got these 5 from the extraction.

Try putting the .exe in a folder and do the extract here and see if you get those five out of it.

 

[FCUSA]

OK - I am looking at your example but how do you put it into a folder? Where it says 'send to - documents' (right clicking Desktop icon)?

 

[derekimo]

OK - I am looking at your example but how do you put it into a folder? Where it says 'send to - documents' (right clicking Desktop icon)?

I just made a new blank folder, renamed it and just drag and drop in to the folder.

Just right click on an empty area and select new, then folder.

 

[FCUSA]

Did all that - thank you!

But when I right click it still does not look like yours. I tried to take a snip (like you did, but could not get everything to stay open like you have it). My Admin shield is a different color? and I do not have Take Ownership -actually I do not have any more options than I did when it was on the Desktop?