Adware remains after Downloader KL removed

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by RUSSELLMARLOWE, Sep 9, 2004.

  1. RUSSELLMARLOWE

    RUSSELLMARLOWE Private E-2

    I got the Downloader KL virus (among others) yesterday on a drive-by download. I've managed to successfully get rid of it. McAfee Virus Scan online reports I'm clean. SpyBot says everything is ok now too. Ad-Aware SE will clean up the residuals, but then the replicate and come back. I'm getting ads and unrequested re-directs in my browser. Any help would be GREATLY appreciated. I have v. 1.97.7 of HiJack This.

    Thanks!

    Russell
     
    RUSSELLMARLOWE, Sep 9, 2004
    #1
  2. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Take the time to do these steps:
    http://forums.majorgeeks.com/showthread.php?t=35407

    Please re-download anything you have, your Hijack This is very old, for example.

    Check back if you can do all of those steps, and we will have you attach your logfile if you can not remove it per our tutorial.
     
    Major Attitude, Sep 9, 2004
    #2
  3. RUSSELLMARLOWE

    RUSSELLMARLOWE Private E-2

    Thanks!

    I followed the directions and also ran Panda's Online Virus Scan and Computer Associates online scan and Panda picked up 7 instances of win32.winshow.y (which I then deleted)

    I "think" I'm good to go now. I looked at the updated logfile for HJT and nothing jumped out at me as out of the ordinary.

    Thanks!

    Russell
     
    RUSSELLMARLOWE, Sep 10, 2004
    #3
  4. Major Attitude

    Major Attitude Co-Owner MajorGeeks.Com Staff Member

    Re: Thanks!

    Ok, if it returns, attach a logfile and I wil ltake a look for any problems. If you want to be sure, I can look for kicks. Be sure all running programs are closed before running it.
     
    Major Attitude, Sep 10, 2004
    #4
  5. RUSSELLMARLOWE

    RUSSELLMARLOWE Private E-2

    here is my "hopefully" clean HJT log.

    Thanks!

    Russell


    Edit by chaslang: inline log change to attachment
     

    Attached Files:

    • hjt.txt
      File size:
      3.8 KB
      Views:
      1
    Last edited by a moderator: Sep 13, 2004
    RUSSELLMARLOWE, Sep 13, 2004
    #5
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: here is my "hopefully" clean HJT log.

    Russell,

    MA said to ATTACH your log (not put it inline). See the HijackThis tutorial sticky thread. I did it for you. I see nothing out of the ordinary in your log.

    This one line could be fixed but it is no big deal:
    R3 - Default URLSearchHook is missing
     
    chaslang, Sep 13, 2004
    #6
  7. RUSSELLMARLOWE

    RUSSELLMARLOWE Private E-2

    Oops..Sorry about that. Thanks for all the help! *

    Sincerely,

    Russell
     
    RUSSELLMARLOWE, Sep 14, 2004
    #7
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Re: Oops..Sorry about that. Thanks for all the help! *

    No problem Russ.
     
    chaslang, Sep 14, 2004
    #8

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds