Help with removing adserverplus.com

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by Martinaa, Aug 9, 2012.

  1. Martinaa

    Martinaa Private E-2

    Hello,
    my name is martinaa and I'm trying to remove adserverplus.com virus from my PC. Is there anybody who can help me with this problem? I am completly lost .....

    Thank you in advance for answer !!
     
    Martinaa, Aug 9, 2012
    #1
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    TimW, Aug 9, 2012
    #2
  3. Martinaa

    Martinaa Private E-2

    Hi Tim,
    thank you for answer. I did already. Installing cleaning systems to my pc. But nt sure if I did everything right.
     
    Martinaa, Aug 9, 2012
    #3
  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Then you need to attach the requested logs.
     
    TimW, Aug 10, 2012
    #4
  5. Martinaa

    Martinaa Private E-2

    Hi, I scanned pc with RogueKiller but don't know which folders I hve to delete.
    Here is log. Pls can you help me? Thank you.
     

    Attached Files:

    Martinaa, Aug 10, 2012
    #5
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You need to follow the instructions completely and attach all the requested logs.
     
    TimW, Aug 10, 2012
    #6
  7. Martinaa

    Martinaa Private E-2

    Yes, as soon as possible.
     
    Martinaa, Aug 10, 2012
    #7
  8. Martinaa

    Martinaa Private E-2

    Log of MB.
     

    Attached Files:

    Martinaa, Aug 10, 2012
    #8
  9. Martinaa

    Martinaa Private E-2

    Rest of MB logs.
     

    Attached Files:

    Martinaa, Aug 10, 2012
    #9
  10. Martinaa

    Martinaa Private E-2

    HitmanPro log.
     
    Martinaa, Aug 10, 2012
    #10
  11. Martinaa

    Martinaa Private E-2

    HP log.
     

    Attached Files:

    Martinaa, Aug 10, 2012
    #11
  12. Martinaa

    Martinaa Private E-2

    MGtools log.

    Let me know please if you have everything you need.
    Thank you.
     

    Attached Files:

    Martinaa, Aug 10, 2012
    #12
  13. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Please use add/remove programs to uninstall:
    Messenger Plus! 5
    Messenger Plus! for Skype

    Please disable all anti-virus and anti-spyware programs while we do the following (re-enable when you are finished):

    Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    After clicking Fix, exit HJT.

    Now copy just the bold text below to notepad (Do not include any space above the word REGEDIT). Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Make sure that you tell me if you receive a success message about adding the above
    to the registry. If you do not get a success message, it definitely did not work.

    After a reboot, please run CCleaner and clean out your temp folders!!

    Tell me what issues remain.
     
    TimW, Aug 11, 2012
    #13
  14. Martinaa

    Martinaa Private E-2

    Hello Tim,
    thank you a lot for your answer. I am going to follow these steps tomorrow and come back to you with the result I receive. Have a nice day.

    M.
     
    Martinaa, Aug 11, 2012
    #14
  15. Martinaa

    Martinaa Private E-2

    Hi Tim,
    I removed: Messenger Plus! 5
    Messenger Plus! for Skype

    I've run C:\MGtools\analyse.exe but these two lines I don't see among the others :

    O4 - HKLM\..\Run: [MessengerPlusForSkypeService] "C:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe"
    O23 - Service: Messenger Plus! Service (MsgPlusService) - Yuna Software - C:\Program Files\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe

    What should I do now ??

    M.
     
    Martinaa, Aug 12, 2012
    #15
  16. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    As I asked, tell me what issues remain. ;)
     
    TimW, Aug 12, 2012
    #16
  17. Martinaa

    Martinaa Private E-2

    Many issues .... in my case. :)

    What about this two lines? Don't need to do anything if they are not there?
    And do I still need to do REGEDIT4 ?
     
    Martinaa, Aug 12, 2012
    #17
  18. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Yes, you still need to do the reg. fix. You also need to tell me exactly what issues you have.
     
    TimW, Aug 12, 2012
    #18
  19. Martinaa

    Martinaa Private E-2

    OK.
    Next issues: After following Read & Run Me First - some transparent icons appeard on my desktop and folder RK_ Quarantine. What to do?
     
    Martinaa, Aug 12, 2012
    #19
  20. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    They will be removed when we do our final cleanup. You still haven't told me what issues you may still be having, if any.
     
    TimW, Aug 12, 2012
    #20
  21. Martinaa

    Martinaa Private E-2

    I received success message about adding files into registry. Thank you but don't have other problems.
     
    Martinaa, Aug 12, 2012
    #21
  22. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Good to know.

    If you are not having any other malware problems, it is time to do our final steps:

    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware. You can uninstall RogueKiller and HitManPro.
    2. Go back to step 6 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If running Vista or Win 7, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Go to add/remove programs and uninstall HijackThis.
    6. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders
      related to MGtools and some other items from our cleaning procedures.
    7. After doing the above, you should work thru the below link:


    Malware removal from a National Chain = $149
    Malware removal from MajorGeeks = $0
     
    TimW, Aug 13, 2012
    #22
  23. Martinaa

    Martinaa Private E-2

    Hi Tim,
    I've run CCleaner but still have transparent icons on desktop.
    I have XP, what should I do with MGtools?

    Is there any way how to find out if Defogger is disable or enable? ( I did some operations today with it .... and not sure if is enable now ... )

    Thank you a lot for HELP.
     
    Martinaa, Aug 13, 2012
    #23
  24. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You are welcome. Did you follow my clean up instructions?
     
    TimW, Aug 13, 2012
    #24
  25. Martinaa

    Martinaa Private E-2

    Which one ??
    Final steps ?
    Not yet. How do I uninstall rougekiller and hitmanpro?
    And TDSSkiller ? Just delete them from desktop?

    M.
     
    Martinaa, Aug 13, 2012
    #25
  26. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I gave you the final clean up steps in post #22. And yes, you can just delete those items from your desktop.
     
    TimW, Aug 14, 2012
    #26
  27. Martinaa

    Martinaa Private E-2

    Yes, I did follow final steps. The last thing to do is delete MGtools. Don't have MGclean.bat file in MGtools folder. How can I delete it?
     
    Martinaa, Aug 15, 2012
    #27
  28. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Yes, you do:
     
    TimW, Aug 15, 2012
    #28
  29. Martinaa

    Martinaa Private E-2

    Done. :)
    Thank you for your patience.

    Sorry, I forgot to ask you also about Hijack This. I don't see HT among programs. How can I uninstal it?
     
    Martinaa, Aug 15, 2012
    #29
  30. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    If it is not in your Add/Remove program list, then McClean.bat removed it.
     
    TimW, Aug 16, 2012
    #30
  31. Martinaa

    Martinaa Private E-2

    Ok. Thank you again for your assistance and help.
    Wish you the best.

    M.
     
    Martinaa, Aug 16, 2012
    #31
  32. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You are most welcome. Safe surfing. :)
     
    TimW, Aug 16, 2012
    #32

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds