All Scans Attached for virus removal, Thanks

Discussion in 'Malware Help (A Specialist Will Reply)' started by mhodge44, Dec 6, 2009.

  1. mhodge44

    mhodge44 Private E-2

    I attached the log files for all programs except RootRepeal since it didn't find anything. If this log file is needed I can rerun it. The Combo Fix required a couple restarts of the computer because it found rootkit activity

    If you want a description of the problem, here's my version of it. This is my work laptop that I received a little over 1 month ago and it seems like this problem started about 1 week after I got it. Every so often, usually an hour to couple hours in between, it will pop up a window that usually talks about making money from home with Google, and it pops up a second window with other advertisements. The second window is not an internet explorer window, rather the icon on the taskbar is kind of like a square with a blue top and is says: Advertisement
    The problem has gotten worse over the weeks and now the computer can freeze up doing common tasks, like internet browsing. Sometimes the minimize/maximize/close button at the very top right of windows screens are not visible, the boxes are look kind of like a colorful static. I dont think I have seen that problem much recently. Yesterday it shut down like 3 times on me, all I was doing common was internet browsing. This is my work computer and it is extremely important to conducting my job so I do not browse into questionable sites. I did download a couple trial versions of syncing programs to auto-backup onto the network drive. I guess maybe I ot something from this, any help is appreciated. Every once in a while Symantec would pop up something about bloodhound virus over the alst couple weeks.
     

    Attached Files:

    mhodge44, Dec 6, 2009
    #1
  2. mhodge44

    mhodge44 Private E-2

    I meant to add how I knew it was stilla active. When trying to remember my password to this site, internet explorer crashed on me 3 times when trying to log into my email. Since then the advertisement has come up once. Internet explorer also jsut seem to have a hard time and lock up for 30 seconds or more on any screen where I have netered log in info. Otherwise, everything is fine as usual. I have been working the last couple hours and everything is normal speed unless work involves internet explorer.
    Thanks again
     
    mhodge44, Dec 7, 2009
    #2
  3. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You have a rootkit infection. Please do the following:

    Download The Avenger by Swandog469, and save it to your Desktop.

    * Extract+ avenger.exe from the Zip file and save it to your desktop

    Please disable all anti-virus and anti-spyware programs while we do the following (re-enable when you are finished):

    * Run avenger.exe by double-clicking on it.
    * -Do not change any check box options!!
    * Copy everything in the Quote box below, and paste it into the Input script here: part of the window:

    * Now click the Execute button.
    * Click Yes to the prompt to confirm you want to execute.
    * Click Yes to the Reboot now? question that will appear when Avenger finishes running.
    * Your PC should reboot, if not, reboot it yourself.
    * A log file from Avenger will be produced at C:\avenger.txt and it will popup for you to view when you login after reboot.

    You will need to boot to the Recovery Console that you have installed (perhaps when you installed ComboFix) to remove this infection.

    Now boot to the Recovery Console and run the fixmbr to clear a Master Boot Record infection that you have.

    You can read the below to help you do this:

    http://support.microsoft.com/kb/307654


    Then boot back into normal mode.

    Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator).

    Then attach the below logs:

    * C:\Avenger.txt
    * C:\MGlogs.zip

    Make sure you tell me how things are working now!
     
    TimW, Dec 8, 2009
    #3

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds