MajorGeeks Support Forums

Go Back   MajorGeeks Support Forums > ----------= PC, Desktop and Laptop Support =---------- > Malware Removal
Register FAQ Members List Calendar Casino Mark Forums Read

Malware Removal Malware removal forum. Please see the READ ME FIRST thread before you post. Forum is staffed by a small number of volunteers, please be patient.


Reply
 
Thread Tools Display Modes
  #41  
Old 04-02-12, 16:41
iivanita iivanita is offline
Private First Class
 
Join Date: Apr 2012
Posts: 42
Thanks: 53
Thanked 0 Times in 0 Posts
Thumbs up Re: abnow plus windows problem

i want to thank you all GUYS here...TimW thank you so much!! came here in such a miserable state......and without any knowledge managed to follow your steps and fix these ugly viruses.... you are so so great!! and this page!..

how can i make something in return ? buy some useful product for protection or donate? how does it work here?

also if you need any info on croatia, planing a visit, need some help, tips whatever....pls contact me...
Reply With Quote
Sponsored links
  #42  
Old 04-02-12, 16:53
TimW's Avatar
TimW TimW is offline
MajorGeeks Administrator - Jedi Malware Expert
 
Join Date: Jan 2005
Location: The recesses of my mind!
Posts: 46,713
Thanks: 449
Thanked 4,656 Times in 4,395 Posts
Default Re: abnow plus windows problem

Not quite done.

Double-click OTL.exe to start the program.
  • Copy and Paste the following code into the Custom Scans/Fixes textbox. Do not include the word Code

Code:
:processes
:killallprocesses
:otl
:files
C:\Windows\assembly\tmp\U
C:\Windows\assembly\tmp\{1B372133-BFFA-4dba-9CCF-5474BED6A9F6}
:commands
[PURITY]
[EMPTYTEMP]
[RESETHOSTS]
[REBOOT]
  • Then click the Run Fix button at the top.
  • Click the OK button.
  • OTL may ask to reboot the machine. Please do so if asked.
  • The report should appear in Notepad after the reboot. Just close notepad and attach this log form OTL to your next message.

Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Win7, don't double click, use right click and select Run As Administrator).


Then attach the below logs:
  • C:\MGlogs.zip

Make sure you tell me how things are working now!

Hopefully that will do it.
__________________
Major cake licker.
YCLAHTW, BYCMHD!!

Major Geeks on Facebook

Major Geeks Newsletter
Reply With Quote
  #43  
Old 04-02-12, 17:10
iivanita iivanita is offline
Private First Class
 
Join Date: Apr 2012
Posts: 42
Thanks: 53
Thanked 0 Times in 0 Posts
Default Re: abnow plus windows problem

Tim you are a star ...i think my pc works now better then before it was infected, it seems beeing faster...and webpages opening so quickly
Attached Files
File Type: zip MGlogs.zip (302.3 KB, 2 views)
File Type: log 04032012_005756.log (4.1 KB, 1 views)
Reply With Quote
  #44  
Old 04-02-12, 17:15
TimW's Avatar
TimW TimW is offline
MajorGeeks Administrator - Jedi Malware Expert
 
Join Date: Jan 2005
Location: The recesses of my mind!
Posts: 46,713
Thanks: 449
Thanked 4,656 Times in 4,395 Posts
Default Re: abnow plus windows problem

Sweet, looks good.

If you are not having any other malware problems, it is time to do our final steps:
  1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no real time protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.We recommend them for doing backup scans when you suspect a malware infection.
  2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
    • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
    • "%userprofile%\Desktop\combofix" /uninstall
      • Notes: The space between the combofix" and the /uninstall, it must be there.
      • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.


  3. Go back to step 6 of the READ ME and renable your Disk Emulation software with Defogger if you had disabled it.
  4. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
  5. If we had you download any registry patches like fixme.reg or fixWLK.reg (or any others), you can delete these files now.
  6. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
  7. Go to add/remove programs and uninstall HijackThis.
  8. Goto the C:\MGtools folder and find the MGclean.bat file. Double click on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
  9. If you are running Win 7, Vista, Windows XP or Windows ME, do the below:
    • Refer to the cleaning procedures pointed to by step 7 of the READ ME
      for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
    • Then reboot and Enable System Restore to create a new clean Restore Point.

  10. After doing the above, you should work thru the below link:


Malware removal from a National Chain = $149
Malware removal from MajorGeeks = $0
__________________
Major cake licker.
YCLAHTW, BYCMHD!!

Major Geeks on Facebook

Major Geeks Newsletter
Reply With Quote
  #45  
Old 04-02-12, 17:20
iivanita iivanita is offline
Private First Class
 
Join Date: Apr 2012
Posts: 42
Thanks: 53
Thanked 0 Times in 0 Posts
Default Re: abnow plus windows problem

))))))))) THAAAAAAAAAAAANK YOU so so much!!!....

pls tell me what would be best to do to repay somehow....do people donate to this site? or to you?

this tought me a lesson now, never to be without antivirus s. , i did not have it for 2 years....or more
Reply With Quote
Sponsored links
  #46  
Old 04-02-12, 18:53
chaslang's Avatar
chaslang chaslang is offline
MajorGeeks Admin - Master Malware Expert
 
Join Date: Feb 2004
Location: Northern New Jersey USA
Posts: 80,440
Thanks: 62
Thanked 7,687 Times in 4,146 Posts
Default Re: abnow plus windows problem

Note there are two more files from the Zero Access infection that should be deleted. You should be able to manually delete them now that the heart of the infection has been removed. See if you can delete the below two files:

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\{E9C1E1AC-C9B2-4c85-94DE-9C1518918D12}.tlb
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\{E9C1E1AC-C9B2-4c85-94DE-9C1518918D12}.tlb
__________________
"There are 10 types of people in this world. Those who understand binary and those who don't."


Support Majorgeeks on Facebook:

Majorgeeks Newsletter
Reply With Quote
The Following User Says Thank You to chaslang For This Useful Post:
iivanita (04-03-12)
  #47  
Old 04-03-12, 11:36
iivanita iivanita is offline
Private First Class
 
Join Date: Apr 2012
Posts: 42
Thanks: 53
Thanked 0 Times in 0 Posts
Default Re: abnow plus windows problem

Quote:
Originally Posted by chaslang View Post
Note there are two more files from the Zero Access infection that should be deleted. You should be able to manually delete them now that the heart of the infection has been removed. See if you can delete the below two files:

C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\{E9C1E1AC-C9B2-4c85-94DE-9C1518918D12}.tlb
C:\Windows\ServiceProfiles\NetworkService\AppData\Local\Temp\{E9C1E1AC-C9B2-4c85-94DE-9C1518918D12}.tlb
i have done it ))
now my computer is safe, right?

THANK YOU GUYS!!! so much, i see you are busy now ...many desperate people...but you are doing great job!
Reply With Quote
  #48  
Old 04-03-12, 11:42
iivanita iivanita is offline
Private First Class
 
Join Date: Apr 2012
Posts: 42
Thanks: 53
Thanked 0 Times in 0 Posts
Default Re: abnow plus windows problem

now i coppied this into run

"%userprofile%\Desktop\combofix" /uninstall

and combofix started to install....and now i got this message warning to disable microsoft security essential....what should i do pls?..it was supposed to uninstall and it looks like installing to me....it is on the desktop
Reply With Quote
  #49  
Old 04-03-12, 11:59
iivanita iivanita is offline
Private First Class
 
Join Date: Apr 2012
Posts: 42
Thanks: 53
Thanked 0 Times in 0 Posts
Default Re: abnow plus windows problem

Quote:
Originally Posted by iivanita View Post
now i coppied this into run

"%userprofile%\Desktop\combofix" /uninstall

and combofix started to install....and now i got this message warning to disable microsoft security essential....what should i do pls?..it was supposed to uninstall and it looks like installing to me....it is on the desktop
i suppose this %userprofile% should have been my name....i did not notice it...i would like to stop combofix now...am afraid of that program....would be best to shut it down in the middle of process or something else?
Reply With Quote
  #50  
Old 04-03-12, 12:17
iivanita iivanita is offline
Private First Class
 
Join Date: Apr 2012
Posts: 42
Thanks: 53
Thanked 0 Times in 0 Posts
Default Re: abnow plus windows problem

aha i uninstalled it, read that this is normal process....was a bit confusing to me. but all is safe ignore the previous 2 posts
Reply With Quote
Sponsored links
  #51  
Old 04-03-12, 13:05
TimW's Avatar
TimW TimW is offline
MajorGeeks Administrator - Jedi Malware Expert
 
Join Date: Jan 2005
Location: The recesses of my mind!
Posts: 46,713
Thanks: 449
Thanked 4,656 Times in 4,395 Posts
Default Re: abnow plus windows problem

No problem. Glad to know all is working for you now. Safe surfing.
__________________
Major cake licker.
YCLAHTW, BYCMHD!!

Major Geeks on Facebook

Major Geeks Newsletter
Reply With Quote
The Following User Says Thank You to TimW For This Useful Post:
iivanita (04-03-12)
  #52  
Old 04-03-12, 14:27
iivanita iivanita is offline
Private First Class
 
Join Date: Apr 2012
Posts: 42
Thanks: 53
Thanked 0 Times in 0 Posts
Smile Re: abnow plus windows problem

thank you Tim, i hope i wont be needing your help for quite some time now but i will recommend you wherever i can, i could not do it without you, cause here IT guys just dont know much! you are really great !! my internet explorer has never been faster )
Reply With Quote
  #53  
Old 04-03-12, 14:34
TimW's Avatar
TimW TimW is offline
MajorGeeks Administrator - Jedi Malware Expert
 
Join Date: Jan 2005
Location: The recesses of my mind!
Posts: 46,713
Thanks: 449
Thanked 4,656 Times in 4,395 Posts
Default Re: abnow plus windows problem

Good to know. And you are most welcome.
__________________
Major cake licker.
YCLAHTW, BYCMHD!!

Major Geeks on Facebook

Major Geeks Newsletter
Reply With Quote
The Following User Says Thank You to TimW For This Useful Post:
iivanita (04-03-12)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Abnow problem ilstefano Malware Removal 12 03-20-12 21:22
Abnow.com removal??? gezzamondo Malware Removal 3 03-19-12 16:35
Abnow and Internet issues treydawgmt Malware Removal 21 02-29-12 23:12
abnow.com and mediashifting.com redirecting problem please help doubleodoughnut Malware Removal 1 02-03-12 06:45
abnow redirect issue Rob999 Malware Removal 3 02-02-12 13:34


All times are GMT -5. The time now is 02:01.

MajorGeeks.Com Menu

MajorGeeks.Com \ All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ NEW! PC Games \ System Tools \ Macintosh \ Demonews.Com \ Top Downloads

MajorGeeks.Com \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds


All content Copyright MajorGeeks.com source code Powered by vBulletin® Version 3.8.4
Copyright © 2009 vBulletin Solutions, Inc. All rights reserved.
Ad Management by RedTyger