Trojan Horse Crypt.Aqwl - internet down after running Malware

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Victim, Apr 17, 2012.

  1. Victim

    Victim Private E-2

    Need help with Trojan Horse virus (similar to what JulesM encountered in another thread), ran the 5 tools provided in this forum and has the respective log files but Internet connection is broken now (using iPad now) with the following message :
    "Window was unable to find a certificate to log you on to the network"

    Rerun SuperAntiSpyware to repair broken network connection but no luck

    TDSSKiller found nothing
    MBR Check has Done! Press enter to exit

    Greatly appreciate if someone can help, thank you.
     
    Victim, Apr 17, 2012
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Transfer the requested logs to another computer and attach them to your next reply.
     
    TimW, Apr 17, 2012
    #2
  3. Victim

    Victim Private E-2

    I rerun comboFIx and my internet came back though it's very slow and on/off
    Log files attached
     

    Attached Files:

    Victim, Apr 17, 2012
    #3
  4. Victim

    Victim Private E-2

    Remaining logs

    Thanks for looking into this :)
     

    Attached Files:

    Victim, Apr 17, 2012
    #4
  5. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I am not finding any major infection in your system. You can manually delete:
    c:\documents and settings\All Users\Application Data\F4D55F230446600D000152A02830AC72
    c:\documents and settings\Serene Wong\Application Data\Amhyel
    c:\documents and settings\Serene Wong\Application Data\Giym

    Also use add/remove programs to uninstall:
    Java(TM) 6 Update 26

    Reboot and download and install:
    Java Runtime 7

    Tell me what issues you are still having, if any.
     
    TimW, Apr 17, 2012
    #5
  6. Victim

    Victim Private E-2

    Done with deletion and installation of Java runtime 7.

    How do i tell if the virus is cleared? Can I reinstall anti virus (AVG) at this stage to see if anything is picked up by the scan? Previously AVG picked up the Trojan Horse and self generated tracking cookies everytime the computer is connected to the internet though it was unable to delete the infected files.
     
    Victim, Apr 17, 2012
    #6
  7. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Yes, reinstall AVG and let me know if it finds anything. If it does, attach a log.
     
    TimW, Apr 18, 2012
    #7
  8. Victim

    Victim Private E-2

    It's still there :(
     

    Attached Files:

    Victim, Apr 18, 2012
    #8
  9. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    All these are in your system restore folders. Toggle system restore. ;)
     
    TimW, Apr 18, 2012
    #9
  10. Victim

    Victim Private E-2

    Oh so it's all cleared then?!! :)

    Internet is still slow compared to before, hopefully it will go back to normal soon. I guess I should proceed with Toggle System Restore then?

    Thanks so much Tim!
     
    Victim, Apr 18, 2012
    #10
  11. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You are most welcome.

    If you are not having any other malware problems, it is time to do our final steps:

    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real time protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.We recommend them for doing backup scans when you suspect a malware infection.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /uninstall
        • Notes: The space between the combofix" and the /uninstall, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.


    3. Go back to step 6 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
    4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    5. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
    6. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    7. Go to add/remove programs and uninstall HijackThis.
    8. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    9. If you are running Win 7, Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures pointed to by step 7 of the READ ME
        for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.

    10. After doing the above, you should work thru the below link:


    Malware removal from a National Chain = $149
    Malware removal from MajorGeeks = $0
     
    TimW, Apr 19, 2012
    #11
  12. Victim

    Victim Private E-2

    Yes, will do accordingly.

    Again, appreciate your fast response through out the ordeal.:)
     
    Victim, Apr 19, 2012
    #12
  13. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You are most welcome. Safe surfing. :)
     
    TimW, Apr 20, 2012
    #13

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds