Malaware problems need diagnosing

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by iradeut, Mar 12, 2006.

  1. iradeut

    iradeut Private E-2

    The most obvious problem I'm having is consistant pop-ups that try and tell me I have a virus (most commonly Blackworm) and then re-direct me to a page that trys to sell me a program to fix it. The pop-ups are frequently disguised as windows error messages, and sometimes appear to start installing something in the background.

    I've scrupulously done all the steps outlined in your malaware instructions with 2 exceptions/problems:

    1. I cannot get into safemode. When I try it completes the process (it says safe mode on all 4 corners on a black screen), but I cannot start explorer.exe. If I control-alt-delete, I get the task manager, but if I try and start explorer.exe manually, it begins to start up, but then immediately shuts down. So all the steps have been done in regular mode.

    2. Ad-aware crashes every time I try and use it. Complete crash---blue screen and spontanious re-boot

    Otherwise I've completed the steps. HJT Log is attached.
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    You forgot to complete the instructions in step 6. There are two logs that must be attached.

    You have a Virtumonde infection which is mentioned in the READ & RUN ME. Follow the steps in the below link and attach the requested log:

    Virtumonde aka Trojan Vundo Removal

    Then attach a new HJT log and tell me how things are working.
     
  3. iradeut

    iradeut Private E-2

    Ok done...both logs attached. I think that may have done the trick. I can get into safe mode now. I ran ad-aware in safe mode succesfully and I think I'm clean. See any other problems?

    ...and thanks.
     

    Attached Files:

  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You still never complete step 6 of the READ & RUN ME. There are two logs requested in that step. You never attached them. However if you are not having anymore malware problems, then don't worry about them now. But if you ever have to come for help again, do not skip posting those logs.

    If you are not having any other malware problems, it is time to go back to step 1 of the READ & RUN ME to Disable System Restore which will flush your Restore Points. Then reboot and enable System Restore to create a new clean Restore Point.

    After that, you should work thru the below link:

    How to Protect yourself from malware!
     
  5. iradeut

    iradeut Private E-2

    thanks for the help. I think I'm ok now.
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Surf safely!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds