Windows XP Cleaning Procedure

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by mschoettger, Mar 30, 2008.

  1. mschoettger

    mschoettger Private E-2

    Hello,
    Wow, I am really over my head here... I have never tried to remove viruses, worms, etc. before.

    It started around 2 days ago. I downloaded a few freeware FTP programs as well as a few freeware Website publishing programs. I messed around with a few of them and then I had to leave. I come back a couple of hours later and I have error messages and pop up balloons warning me of
    C:/Windows/wml.exe files
    Abebot
    worm.Win32.NetBooster
    TrojanDownloader.exe files

    as well as many more.

    I have already done the windows xp cleaning procedure posted by chaslang; as well as downloading all four programs. Followed through with all the steps and it has helped a lot! But I am still having issues with one window that keeps coming up. White and red colored, stating that either C:/Windows/wml.exe- Abebot, or a TrojanDownloader.exe file.

    Otherwise all the startbar warning balloons have stopped as well as the pop ups that say anything about worm.Win32.NetBooster, and the warning messages about Someone hacking into my computer..blah.blah.blah..

    Thanks for the help,
    mschoettger
     

    Attached Files:

    Last edited: Mar 30, 2008
  2. abri

    abri MajorGeek

    Hi mschoettger,
    Welcome to Major Geeks!


    Please do the following.

    Begin by running CCleaner in the default setting with the Windows tab as the one on top. CCleaner was installed as part of the READ & RUN ME which you worked through.

    Next download HostsXpert and then follow the below steps. [/B]
    • Unzip HostsXpert.zip
    • It will create a folder named HostsXpert in whatever folder you extract it to.
    • Run HostsXpert.exe by double clicking on it.
    • click the Make Writeable? button.
    • click Restore Microsoft's Hosts File and then click OK.
    • Click the X to exit the program

    After you finish the above, please go to Removing Zlob aka SmitFraud, SpySheriff, Infections and follow the instructions. This will produce two logs, both called rapport.txt. Please allow the tool to run and produce the first log. When it completes rapport.txt, attach the log here before continuing with the cleaning procedure. If you don't do this, the second part of the procedure will overwrite the first log and the information will be lost.

    When you finish the above, I would like for you to go to Windows XP Cleaning Procedure and find the link for MGTools. Your tools did not run correctly. This may be because of the infection that is on your computer. Please go ahead and reinstall them as per the instructions. If it asks you if you want to install over the existing ones, say yes. After it completes downloading them, have them run as instructed and attach the new set of logs which will be called MGLogs.zip. When you attach them here, you'll find the by browsing to drive C and looking directly under C. They're just above the superman icon.

    Be sure to allow the MGTools to run to completion.

    abri
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds