Malware Removal Help Requested

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by StiinaQT, Apr 16, 2013.

  1. StiinaQT

    StiinaQT Private First Class

    I did my best to follow the instructions and I messed up. Here's what I did and how I fixed it to complete. I forgot to have HitmanPro ignore all it found and it deleted many things. Since the last time I did this, it caused weeks of software problems, I found a restore point from Midnight before I started the scans. Up until I ran Hitman, none of the scans detected anything. In theory, I was back to the same point as when I ran Hitman incorrectly. So, I ran it, and got the log. I then forgot to run the MGTools as Admin and aborted, then started it over. I hope that didn't mess things up too much.

    Next time, I will print out all of the directions like I used to. Just can't remember all the details without the printouts.

    Thanks in advance!
     

    Attached Files:

    StiinaQT, Apr 16, 2013
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Rerun Hitman and have it delete all that it found. Then tell me what issues you are having.
     
    TimW, Apr 17, 2013
    #2
  3. StiinaQT

    StiinaQT Private First Class

    Tim,

    I did as you instructed. When I booted up this a.m., I get the attached screen. I'm not sure why this backup thing started popping up, but perhaps you will recognize it. I'd like to get rid of it because I do backups regularly to an external drive. I'd like to delete the software, but I don't see what it is.

    What I didn't tell you, the reason I knew I had a critter was because of all the email delivery failures I suddenly began to receive. I checked after this and I'm no longer getting them.

    Thanks!
     

    Attached Files:

    Last edited: Apr 19, 2013
    StiinaQT, Apr 19, 2013
    #3
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You will have to explore that issue in the software forum. Right now, tell me what malware issues you are still having, if any.
     
    TimW, Apr 19, 2013
    #4
  5. StiinaQT

    StiinaQT Private First Class

    No problems as far as I can see. I thought that pop up might be related. Thank you very much for taking a look at things!

    Have a wonderful weekend.
     
    StiinaQT, Apr 19, 2013
    #5
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware. You can uninstall RogueKiller and HitManPro.
    2. Go back to step 4 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Go to add/remove programs and uninstall HijackThis.
    6. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
      related to MGtools and some other items from our cleaning procedures.
    7. After doing the above, you should work thru the below link


    Malware removal from a National Chain = $149
    Malware removal from MajorGeeks = $0
     
    TimW, Apr 20, 2013
    #6
  7. StiinaQT

    StiinaQT Private First Class

    All cleaned up and everything is buttoned up per your instructions. TYVM!!
     
    StiinaQT, Apr 21, 2013
    #7
  8. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You are most welcome. Safe surfing.
     
    TimW, Apr 22, 2013
    #8
  9. StiinaQT

    StiinaQT Private First Class

    I am still having a problem. It appears that I might have that csrss.exe trojan. I thought that I had whacked it, but it's back and has started broadcasting emails again. I tried using the SpeedUpMyPC, but it doesn't seem to kill it. (I had done a search on this and that was one of the suggested fixes.) Thought that I should come back and ask to see what I should do next before spending more money on it.

    Thanks for all of your help.
     
    StiinaQT, May 5, 2013
    #9
  10. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You need to rerun the Read and Run First steps and get me new logs.
     
    TimW, May 6, 2013
    #10

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds