Problem with Revsci, Yieldmanager, ATDMT

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by trollo, Oct 28, 2008.

  1. trollo

    trollo Private E-2

    My AVG Resident Shield picks up Revsci, Yieldmanager, and ATDMT whenever I open my browser (Firefox 2.0.0.0.17). It doesn't pick it up everytime, but seems almost random which one shows up on the shield. I Heal it, but it still comes back.

    I went through the FAQ and went through the updating and cleaning procedures but am still having problems.

    I have attached the Superantispyware, Combofix, and Malware logs to this post. I will make another post for MG tools log.

    Thanks for your help!
     

    Attached Files:

  2. trollo

    trollo Private E-2

    here is my MG log zip.

    Thanks!
     

    Attached Files:

  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Major Geeks!

    You are not having malware problems. Your logs are clean. Look for an option in AVG to tell it to ignore cookies or just ignore these messages yourself. Cookies are not problems and should be ignored. You can read more about cookies in the link given in the below final instructions. You can also optionally change the settings of your browser like suggested in the below link:

    http://www.safer-networking.org/en/faq/37.html


    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommed you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /u
        • Notes: The space between the combofix" and the /u, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
      • Delete the C:\combofix folder from combofix (if it exists)
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Go to add/remove programs and uninstall HijackThis.
    6. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
    7. If you are running Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning steps in the READ ME for your Window version and see the steps to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    8. After doing the above, you should work thru the below link:
     
  4. trollo

    trollo Private E-2

    Thank you for your help!
     
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Surf safely!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds