Please check logs

Discussion in 'Malware Help (A Specialist Will Reply)' started by pusssykatt, Apr 10, 2009.

  1. pusssykatt

    pusssykatt Private E-2

    My AVG found a 'warning' but when I tried to delete or vault it, I kept getting the message that I can't connect to avg. I installed PC Tools, but it kept freezing, although it did display there was an infection.

    Many thanks!
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    I don't know what you mean by this. AVG does not "find warnings". It may popup a message warning you about a potential malware problem. So exactly what did you mean to say and what was the warning message.

    Also note that you have an outdated version of AVG. You have version 8.0 and the current version is 8.5

    PC Tools what? Antivirus? Spyware Doctor? Firewall? I don't see anything from PC Tools installed?

    Other than what was removed all ready, all I see is that you are way out of date with MGtools and that you did not put your PC into normal startup mode with MSconfig and that you did not uninstall Viewpoint Media Player or uninstall old Sun Java versions and update. All of this was requested in step 1 of the READ & RUN ME.

    Also you need to delete or move all of the below somewhere else if you want them. You should not be saving downloads into the C:\Program Files folder.
    Code:
    2006-01-18 15:57 2,566,736 ----a-w c:\program files\spywareblastersetup351.exe
    2004-10-19 13:32 917,058 ----a-w c:\program files\badcopy3.exe
    2004-07-24 14:49 3,081,958 ----a-w c:\program files\audacity-win-1.2.1.exe
    2004-07-21 12:48 78 ---ha-w c:\program files\Picasa.ini
    2004-07-12 13:13 900,568 ----a-w c:\program files\hddh.exe
    2004-07-02 01:56 4,354,084 ----a-w c:\program files\spybotsd13.exe
    2004-06-27 16:54 6,383,200 ----a-w c:\program files\pci_us_smartrecovery.exe
    2004-06-08 18:57 9,559,793 ----a-w c:\program files\averydesignproLimitedrc7.exe
    2004-06-02 15:04 2,549,760 ----a-w c:\program files\wrdzp32b.exe
    2004-05-19 12:50 215,040 ----a-w c:\program files\agnis-as.exe
    2004-05-19 12:50 131,584 ----a-w c:\program files\agnis-op.exe
    2004-05-19 12:49 516,608 ----a-w c:\program files\agnis.exe
    2004-05-19 12:49 169,472 ----a-w c:\program files\prowagon3.exe
    2004-05-19 12:48 218,949 ----a-w c:\program files\ie-spyad.zip
    2004-05-19 12:47 257,536 ----a-w c:\program files\ie-spyad.exe
    2004-05-18 20:14 2,062,665 ----a-w c:\program files\spywareguardsetup.exe
    2004-04-10 17:13 10,834,440 ----a-w c:\program files\stcdeval.exe
    2004-03-30 03:42 1,955,904 ----a-w c:\program files\ppviewer.exe
    2004-03-28 21:53 1,760,378 ----a-w c:\program files\aaw6.exe
    2004-03-23 13:08 104,176 ----a-w c:\program files\MyDVDErrors.zip
    2003-01-04 00:33 72,722 ----a-w c:\program files\StartupCPL.exe
    2002-07-07 19:56 175,104 ----a-w c:\program files\emailstripper.exe
    2002-05-16 17:23 206,338 ----a-w c:\program files\points.exe
    2000-12-07 16:44 288 ----a-w c:\program files\File_id.diz
     
  3. pusssykatt

    pusssykatt Private E-2

    After I ran all of the programs listed in my post, I was able to get my AVG working again. Previously it was running and found 2 tracking cookies that they listed as a 'warning.' I was able to isolate one in the vault, but whenever I tried to put the other in the vault, my AVG quit working. It is now in the vault, however, I'm not sure if I've got something imbedded. I'm continuing to run Malwarebytes and SuperAntiSpyware and they come up clean.

    Thanks.
     
    Last edited by a moderator: Apr 16, 2009
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Cookies are not problems.

    If you are not having any other malware problems, it is time to do our final steps:
    1. We recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no protection. They do not use any significant amount of resources ( except a little disk space ) until you run a scan.
    2. If we had you use ComboFix, uninstall ComboFix (This uninstall will only work as written if you installed ComboFix on your Desktop like we requested.)
      • Click START then RUN and enter the below into the run box and then click OK. Note the quotes are required
      • "%userprofile%\Desktop\combofix" /u
        • Notes: The space between the combofix" and the /u, it must be there.
        • This will uninstall ComboFix and also reset hidden files and folders settings back to Windows defaults.
      • Delete the C:\combofix folder from combofix (if it exists)
    3. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    4. If running Vista, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Go to add/remove programs and uninstall HijackThis.
    6. You can delete the C:\MGtools folder and the C:\MGtools.exe file. You can also delete the C:\MGlogs.zip
    7. If you are running Vista, Windows XP or Windows ME, do the below:
      • Refer to the cleaning procedures in step 3 the READ ME for your Window version and see the instructions to Disable System Restore which will flush your Restore Points.
      • Then reboot and Enable System Restore to create a new clean Restore Point.
    8. After doing the above, you should work thru the below link:
     
  5. pusssykatt

    pusssykatt Private E-2

    I apologize for any mistakes I made in posting my reports. It wasn't intentional.

    Thank you very much for the help and for telling me how to return my computer to the basics.
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. Surf safely!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds