Main issues resolved

lazaruss · May 7, 2014

Hi Most of the issues and scam programs have stopped but I suspect there's still things running in the background.

When running MGTools Processdll.exe had to be terminated because it generated an exception which could not be handled. Please see screen shot:

I would appreciate it if someone could take a look at the log files as im still getting adverts etc.

Thanks

TimW · May 7, 2014

First, rerun Hitman and have it fix everything it found. Then rerun RogueKiller and click on the "Schedules Tasks" tab and remove the two items.

Reboot and rescan with both Hitman and Roguekiller and attach the two new logs.

lazaruss · May 11, 2014

Hi TimW

Sorry for the delay. Its probably me being dim but I dont see a scheduled tasks tab in RougeKiller, theres just Processes, registry, hosts,Proxy,DNS,Driver,Files,MBR,Shortcuts and Browser Addons.

Kestrel13! · May 11, 2014

Check the Registry tab. It *should* be there.

lazaruss · May 11, 2014

Really sorry but I still cant see anything that was detected which relates to scheduled tasks :-o

lazaruss · May 11, 2014

Thats strange!? just took a look at the log file and the scheduled tasks are no longer there?? I ran hitman and cleared all from there first as instructed, that wouldnt have removed the tasks would it? I havnt done anything else

Heres the log files for you to take a look.

Thanks

TimW · May 12, 2014

Please download Junkware Removal Tool to your desktop.

Shut down your protection software now to avoid potential conflicts.

Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.

The tool will open and start scanning your system.

Please be patient as this can take a while to complete depending on your system's specifications.

On completion, a log (JRT.txt) is saved to your desktop and will automatically open.

Attach JRT.txt to your next message.

lazaruss · May 12, 2014

Thanks TimW, please find attached log file as requested.

TimW · May 13, 2014

What issues are you still having, if any?

lazaruss · May 13, 2014

Hi TimW

There are still a few issues. First it takes forever to boot, once its done "Advanced registry Optimizer 2010" pops up asking me to buy it to fix problems.

I did have one ad popup in google while coming here, not too bad but would like to get rid of it if possible.

Also, im not sure if this is related to the malware but the uninstall programs in windows is acting a bit funky. Firstly there are strange entrys like "status" and "Scan" and your unable to uninstall alot of programs even the legit ones. please see screenshot below:

Thanks for your help with this. Much appreciated

TimW · May 13, 2014

Have you tried using Revo Uninstaller to remove those programs?

lazaruss · May 13, 2014

I have not tried t, will give it a go. Do you think it's likely to remove advanced registry optimizer 2010?

lazaruss · May 13, 2014

Revo uninstaller only shows 7 programs installed.

TimW · May 14, 2014

Please run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).Make sure that you watch for the license agreement for TrendMicro HijackThis and click on the Accept button TWICE to accept ( yes twice ).
Then attach the below logs:

* C:\MGlogs.zip

lazaruss · May 14, 2014

Dont worry, I think ive removed it now. Its not coming up on startup anymore anyway.

Thanks for your help and sorry for being a pain!

TimW · May 15, 2014

You're welcome.

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.

Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.

Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.

If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Now goto the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

Log in or Sign up

Main issues resolved

lazaruss Private E-2

Attached Files:

MGlogs.zip

HitmanPro_20140507_1533.log

TDSSKiller.3.0.0.34_07.05.2014_15.18.24_log.txt

mbam.txt

RKreport[0]_S_05072014_120717.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

lazaruss Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

lazaruss Private E-2

lazaruss Private E-2

Attached Files:

HitmanPro_20140511_2142.log

RKreport[0]_S_05112014_213007.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

lazaruss Private E-2

Attached Files:

JRT.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

lazaruss Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

lazaruss Private E-2

lazaruss Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

lazaruss Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Main issues resolved

lazaruss Private E-2

Attached Files:

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

lazaruss Private E-2

Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

lazaruss Private E-2

lazaruss Private E-2

Attached Files:

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

lazaruss Private E-2

Attached Files:

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

lazaruss Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

lazaruss Private E-2

lazaruss Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

lazaruss Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Useful Searches