Computer is Infected - Please Help

Discussion in 'Malware Help (A Specialist Will Reply)' started by cfrasier, Feb 18, 2015.

  1. cfrasier

    cfrasier Private E-2

    Thanks in advance. I'm not sure what else to do. I'm getting attack of the pop ups when I click on web pages. Yup, even the parts of pages where there aren't links. It makes for fun adventures. I attached the logs for you fine folk. I hope I got the right log for MGTools - the cmd.exe window said the log was in GetUnKey.txt.

    When it happened, my antivirus got uninstalled by this lovely virus, and my system restore function got disabled. It is a sneaky little bugger. The antivirus is back on and functioning. I've run CCleaner, AUSLogics registry cleaner, Symantec scans, and Malware Bytes. It sticks around.

    Please help me. Thank you so much!
     

    Attached Files:

  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You need to let MGTools.exe run until completion....the log will then be at C:\MGLogs.zip

    Please attach that.
     
  3. cfrasier

    cfrasier Private E-2

    Sorry about the wrong file for MGTools. Attached is the correct log. Thanks!
     

    Attached Files:

  4. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    You need to tell me what issues you are having as I am not finding any malware other than what Hitman found. So, rerun Hitman and have it fix all it found.

    Reboot and rescan with Hitman and RogueKiller and attach the new logs.
     
  5. cfrasier

    cfrasier Private E-2

    I uninstalled Chrome to see if that would fix it and rescanned and sorted everything out. It seems to have fixed it. I appreciate you taking a look at my logs. I appreciate it more than you know. Everything seems sorted now.
     
  6. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Good to know.

    If you are not having any other malware problems, it is time to do our final steps:

    1. We recommend you keep Malwarebytes Anti-Malware for scanning/removal of malware.
    2. Renable your Disk Emulation software with Defogger if you had disabled it in step 4 of the READ & RUN ME.
    3. Go to add/remove programs and uninstall HijackThis. If you don't see it or it will not uninstall, don't worry about it. Just move on to the next step.
    4. If running Vista, Win 7 or Win 8, it is time to make sure you have reenabled UAC by double clicking on the C:\MGtools\enableUAC.reg file and allowing it to be added to the registry.
    5. Now go to the C:\MGtools folder and find the MGclean.bat file. Double click ( if running Vista, Win7, or Win 8 Right Click and Run As Administrator ) on this file to run this cleanup program that will remove files and folders related to MGtools and some other items from our cleaning procedures.
    6. Any other miscellaneous tools we may have had you install or download can be uninstalled and deleted.
    7. If you are running Win 8, Win 7, Vista, Windows XP or Windows ME, do the below to flush restore points:
      • Refer to the instructions for your WIndows version in this link: Disable And Enable System Restore
      • What we want you to do is to first disable System Restore to flush restore points some of which could be infected.
      • Then we want you to Enable System Restore to create a new clean Restore Point.

    8. After doing the above, you should work thru the below link:

     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds