Log checks

Discussion in 'Malware Help (A Specialist Will Reply)' started by DoCNTW3HB, Feb 6, 2014.

  1. DoCNTW3HB

    DoCNTW3HB Private E-2

    Hi all ive been following your malware removal guide and i have all my logs ready here, much appreciated if you could have a look through them and see if i have any problems. Thanks in advance.
     

    Attached Files:

  2. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    Welcome to MajorGeeks!

    We have a bit of work to do; let's begin with this:

    Please re-scan with Hitman Pro and have it delete everything under the heading of
    • Malware
    • Malware remnants
    • Potential Unwanted Programs
    HitmanPro may want to reboot the PC in order for the changes to take affect, please do so.
    After reboot, run new scans with both RogueKiller and Hitman Pro, attach those new logs to your next reply.

    Please download AdwCleaner
    by Xplode and save it to your Desktop.
    • Double click on AdwCleaner.exe to run the tool. (Vista & Win7 users should right-click and "Run As Administrator")
    • Click on the Scan button.
    • After the scan has finished..
    • Click on the Clean button.
    • Press OK when asked to close all programs and follow the onscreen prompts.
    • Press OK again to allow AdwCleaner to restart the computer and complete the removal process.
    • After rebooting, a logfile report (AdwCleaner[S#].txt) will open automatically (where the largest value of # represents the most recent report).
    • A copy of that logfile will also be saved in the C:\AdwCleaner folder.
    • Attach this log to your next reply.

    http://imageshack.us/a/img841/7292/thisisujrt.gif Now download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Attach the JRT.txt to your next message.

    Then run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Windows 7, use right click and select Run As Administrator).

    Attach the new C:\MGlogs.zip file that will be created by running this.

    * Make sure you tell me if you had any problems running this procedure; and answer this - "What malware problems are you still experiencing?"
     
  3. DoCNTW3HB

    DoCNTW3HB Private E-2

    Hi Dr.moriarty thanks for the fast reply i have now followed your steps and here are the log files.
     

    Attached Files:

  4. dr.moriarty

    dr.moriarty Malware Super Sleuth Staff Member

    DoCNTW3HB

    To get a clear picture of the pc's current state, please run new scans only.. for RogueKiller, Hitman Pro, and AdwCleaner. Attach them to your next reply.

    Uninstall this outdated software-
    Java(TM) 6 Update 31

    Please disable all anti-virus and anti-spyware programs while we do the following (re-enable when you are finished):

    Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista/Windows7, don't double click, use right-click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    After clicking Fix, exit HJT.

    Please download OTM by Old Timer and save it to your Desktop.
    • Right-click OTM.exe and select Run as administrator to run it.
    • Copy the lines from the below codebox to the clipboard by highlighting ALL of them and pressing CTRL + C
      (or, after highlighting, right-click and choose Copy): Do not include the word Code: which is just a title line of the code box
    Code:
    :Processes
    explorer.exe
    
    :Service
    WinTrusted
    
    :File
    E:\Program Files (x86)\iWin Games
    
    :Reg
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
    "AVG-Secure-Search-Update_0214c"=-
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "Exetender"=-
    
    :Commands
    [purity]
    [EmptyTemp]
    [start explorer]
    [Reboot]
    • Return to OTM, right click in the Paste List of Files/Folders to Move window (under the yellow barand choose Paste.
    • Now click the large http://forums.majorgeeks.com/chaslang/images/MoveIt%21.png button.
    • If OTM asks to reboot your computer, allow it to do so. The report should appear in Notepad after the reboot.
    • Close OTM.
    Now navigate to the C:\_OTM\MovedFiles folder ( assuming your Windows drive is C). This is where your log will be
    saved in the form of Date and Time mmddyyyy_hhmmss.log. Just look for the most recent .log file. Attach
    this log file to your next message.

    Then run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista or Windows 7, use right click and select Run As Administrator).

    Please attach the updated ]C:\MGlogs.zip also. *You forgot to tell me how the machine is running!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds