my malware logs

Hello, chaplin

I'm looking over your logs, now.

Thanks!

 

Hello, chaplin

First, please disable any antivirus and/or antispy programs you have installed so they will not block this fix. Print out these instructions or save them to a text file so as All Browser Windows must be CLOSED.


Step 1:
Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

After clicking Fix, exit HJT.

Step 2:
Now we need to use ComboFix to remove somemalware files.

• Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
  • If it is not on your Desktop, the below will not work.
• Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix. *Remember to re-start them before coming back online.
• Open Notepad and copy/paste the text in the below code box into it (make sure you scroll all the way down in the code box to get all lines selected ):

Code:

KILLALL::

Files::
C:\net_save.dna
c:\windows\wmsyspr9.prx
c:\windows\inf\Colprofs.exe 

Folder::
C:\TEMP

Registry::
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=-

• Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
• At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
• You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
  If it asks you to overide the previous file with the same name, click YES.
• Now use your mouse to drag CFscript.txt on top of ComboFix.exe
  http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif
• Follow the prompts.
• When it finishes, a log will be produced named c:\\combofix.txt
• I will ask for this log below

Note:

Do not mouseclick combofix's window while it is running. That may cause it to stall.

Step 3:
Delete all files and subfolders in the below folders except ones from the current date (Windows will not let you delete the files from the current day).

Step 4:
Run Ccleaner


Step 5:
Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, use right click and select Run As Administrator).

Step 6:
Install Sun Java Runtime Environment 6 Update 10


Then attach the below logs to your next reply:

• C:\MGlogs.zip
• C:\combofix.txt

* Make sure you tell me if you had any problems running this procedure and give a description of how things are working now!

Thanks!

 

You attached the combofix log twice. You need to attach the C:\MGlogs.zip file.

 

Run this Disable/Remove Windows Messenger to remove Windows Messenger. Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.

Are you still having any problems?

 

chaplain - Your logs look good! If you are not having any other malware problems, it is time to do our final steps:

Safe surfing! :cool