Hardrive Suddenly Full

Discussion in 'Malware Help (A Specialist Will Reply)' started by tel224, Dec 8, 2013.

  1. tel224

    tel224 Private E-2

    My HDD suddenly filled up without me downloading anything or building any new files. Suspect malware from the looks of other posts. Will post logs per Read & Run procs on the forum.
     
  2. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    Hi and welcome. :)

    Yes, please do attach them here and I will review them.
     
  3. tel224

    tel224 Private E-2

    Here are the uploaded files that were requested.
     

    Attached Files:

  4. Kestrel13!

    Kestrel13! Super Malware Fighter - Major Dilemma Staff Member

    You have 5.15 GB space free according to your logs.


    SpyHunter <<< Uninstall this unless you paid for it.


    Re run Hitman and have it delete: Potential Unwanted Programs



    What is this? If you do not know include it in the fix below.

    • O4 - HKLM\..\Run: [bdinstaller] "E:\products\Internet Security\en\install\32bit\setuplauncher.exe" /run:"E:\products\Internet Security\en\install\32bit\setupdownloader.exe" /args:"/after_restart"

    Please disable all anti-virus and anti-spyware programs while we do the following (re-enable when you are finished):

    Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    • O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
    • O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
    • O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe"
    • O4 - HKLM\..\Run: [bdinstaller] "E:\products\Internet Security\en\install\32bit\setuplauncher.exe" /run:"E:\products\Internet Security\en\install\32bit\setupdownloader.exe" /args:"/after_restart"
    After clicking Fix exit HJT.



    Delete these:
    • C:\Documents and Settings\Larry\Local Settings\Application Data\AskToolbar
    • C:\Program Files\Ask.com


    http://imageshack.us/a/img841/7292/thisisujrt.gif Please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Attach JRT.txt to your next message.



    Now run the C:\MGtools\GetLogs.bat file by double clicking on it. (Right click and run as admin if using Vista, Windows7 or Win8) Then attach the new C:\MGlogs.zip file that will be created by running this.

    Let me know of any problems you may have encountered with the above instructions and also let me know how things are running now!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds