Malwarebytes blocks access to a potentially malicious website

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Omgadnowai, Nov 26, 2012.

  1. Omgadnowai

    Omgadnowai Private E-2

    Hello, I'm currently having a problem with what I assume to be typical backdoor malware, and it's causing quite a bit of worrying to the people in the house who, upon using Google, are now sure we're under severe terrorist attack. It doesn't help that I told the blocked I.Ps traced back to Qatar and eastern Europe.

    Either way, I've come here because I'm not too sure what steps I should take. I really ought to acquire some computer knowledge beyond the basic user interface aspect of it.

    Anyway, here are all the logs, as promised.

    Let me know if you need me to do anything else, I'll be monitoring this thread for replies!
     

    Attached Files:

  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Before we continue I would like for you to use MSConfig to put this machine back into normal start up mod

    Rescan with Hitman and have it delete anything under the heading:
    Potential Unwanted Programs

    Please disable all anti-virus and anti-spyware programs while we do the following (re-enable when you are finished):

    Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    • O4 - HKCU\..\Run: [05B33F884ABE6A7AD1661731082A3B2D46C066CF._service_run] "C:\Documents and Settings\Omgadnowai\Local Settings\Application Data\Google\Chrome\Application\chrome.exe" --type=service
    After clicking Fix exit HJT.


    Please run Ccleaner (not the registry scanner) just the cleaner itself to be rid of many temp files.


    Copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

    Make sure that you tell me if you receive a success message about adding the above
    to the registry. If you do not get a success message, it definitely did not work.

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. (Right click and run as admin if using Vista or Windows7) Then attach the new C:\MGlogs.zip file that will be created by running this.

    Let me know of any problems you may have encountered with the above instructions and also let me know how things are running now!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds