Problems with malware removal

VeerleWauters · Feb 25, 2015

Hello,

I followed your procedure very carefully, since my laptop is very slow and sometimes the tabs in my Firefox browser are covered with Chinese signs.
I noticed TDSS Killer only scanned for a very short time and told me there were no threats found. But I did't get a report or log.
MGTools is not installing itself properly. I did install an .exe file on my C-drive but it is not installing a folder. Anyway it is performing a scan. During the scanning procedure I got a pop up window of swwhoami.exe. I closed this window because it was holding back the scanning proces. It did pop up again; I closed it again and it did'nt appear again.
During the scanning proces, MGTools notices many problems.
At the end it tells me it created a zip-file on the C drive and the desktop, but there is no zip-file to be found... So I cannot send you the report of MGTools.
In attachment I send you the report by Hitman Pro, Malware Bytes and RogueKiller.
Could anyoine help me here?
Thanks a lot!!

TimW · Feb 25, 2015

Rerun Hitman and have it remove all it finds.

Now run this tool:

http://www.majorgeeks.com/files/details/superfish_removal_tool.html

Reboot and rescan with Hitman and attach the new log. Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).

Look for and attach the new C:\MGLogs.zip.

VeerleWauters · Feb 25, 2015

Thank you so much for your quick reply. I will follow your procedure and keep you posted!
Veerle

TimW · Feb 25, 2015

I'll be here.

VeerleWauters · Feb 26, 2015

Hi Tim,

I just finalised your procedure. In attachment you can find all the logs etc.
Superfish removal noticed me that it couldn't find any files related to superfish.

Thanks for helping me out!
Veerle

TimW · Feb 26, 2015

Your logs are clean. What issues are you having?

VeerleWauters · Feb 26, 2015

Right now things seem to be going fine.
I decided to start using google chrome instead of firefox since I heared that's got a better protection.
Do you have any idea how I may have got infected with superfish?

Thanks a lot for helping me out!
Veerle

TimW · Feb 26, 2015

Unless you have a Lenovo computer, I don't know how it got on your system.

If you are not having any other malware problems, it is time to do our final steps:

We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.

Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.

Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.

If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.

Now go to the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.

Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.

If you are running Win 8, Win 7, Vista, Windows XP or Windows ME, do the below to flush restore points:

Refer to the instructions for your WIndows version in this link: Disable And Enable System Restore

What we want you to do is to first disable System Restore to flush restore points some of which could be infected.

Then we want you to Enable System Restore to create a new clean Restore Point.

After doing the above, you should work thru the below link:

How to Protect yourself from malware!

VeerleWauters · Feb 26, 2015

Thanks a lot.
I went through the whole procedure. Now fingers crossed that everything stays as fine as it is right now

Have a nice day!
Veerle

TimW · Feb 26, 2015

You are most welcome. Safe surfing.

Log in or Sign up

Problems with malware removal

VeerleWauters Private E-2

Attached Files:

RKreport_SCN_02242015_193704.log

HitmanPro_20150224_2056.log

Malware Bytes log.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

VeerleWauters Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

VeerleWauters Private E-2

Attached Files:

HitmanPro_20150226_1030.log

HitmanPro_20150225_1827.log

filelog.txt

MGlogs.zip

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

VeerleWauters Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

VeerleWauters Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Problems with malware removal

VeerleWauters Private E-2

Attached Files:

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

VeerleWauters Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

VeerleWauters Private E-2

Attached Files:

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

VeerleWauters Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

VeerleWauters Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Useful Searches